TECH Feds Crack Down On Pernicious Chinese Hacking Group That Targeted US Gov’t, Dissidents

Kathy in FL

Administrator
_______________

Feds Crack Down On Pernicious Chinese Hacking Group That Targeted US Gov’t, Dissidents​


The U.S. on Monday announced actions aimed at exposing a sweeping Chinese hacking campaign that has targeted U.S. government institutions, critical infrastructure, media and political dissidents for more than a decade.

Wuhan Xiaoruizhi Science and Technology Company, Limited (Wuhan XRZ), served as a front company for China’s Ministry of State Security (MSS), which deals with overseas policing and espionage, allowing Chinese hackers to hide a multitude of malicious cyber operations, the Treasury Department said after sanctioning the organization on Monday in a statement alongside other U.S. agencies and the United Kingdom. In an indictment unsealed separately, the Department of Justice accused Chinese nationals Zhao Guangzong, Ni Gaobin and five others for their role “in furtherance of [China’s] economic espionage and foreign intelligence objectives” over the past 14 years.

DOJ “will not tolerate efforts by the Chinese government to intimidate Americans who serve the public, silence the dissidents who are protected by American laws, or steal from American businesses,” Attorney General Merrick B. Garland said in the press release. “This case serves as a reminder of the ends to which the Chinese government is willing to go to target and intimidate its critics, including launching malicious cyber operations aimed at threatening the national security of the United States and our allies.”

China’s regional security office established Wuhan XRZ in 2010 to carry out cyber operations against “U.S. and foreign politicians, foreign policy experts, academics, journalists, and pro-democracy activists, as well as persons and companies operating in areas of national importance.”

Hackers associated with the group, known variably as Advanced Persistent Threat 31 (APT31), Judgement Panda, and Zirconium, have gone after U.S. government officials and advisers on national security issues in the White House and other federal agencies; both Democrat and Republican members of Congress; the U.S. Naval Academy and the U.S. Naval War College’s China Maritime Studies Institute, according to the press release.

U.S. investigators also tied the group to major attacks on a Texas-based energy company and companies that do research, development and manufacturing for the U.S. military in Tennessee, Alabama and elsewhere.

APT31 has also attacked high-profile individuals connected to the 2020 election, according to Microsoft.

View: https://twitter.com/USTreasury/status/1772290091450257800?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1772290091450257800%7Ctwgr%5E2fa44eebe248e8558321f21747f39403ea254535%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fdailycallernewsfoundation.org%2F2024%2F03%2F25%2Ffeds-crack-down-on-pernicious-chinese-hacking-group-that-targeted-us-govt-dissidents%2F



In 2020, Zhao Guangzong, working as a contractor for Wuhan XRZ, sent seemingly innocuous emails containing disguised malware to administrators at the U.S. Naval Academy, the the U.S. Naval War College’s China Maritime Studies Institute and an unnamed U.S.-based think tank “focused on U.S. national security issues, including in the Asia-Pacific region,” according to the indictment and press releases.

The hacker also carried out similar “spearphishing” attacks on Hong Kong legislators and pro-democracy activists, the U.S. said.

China has denied U.S. accusations of cyberespionage and accuses Washington of hypocrisy over the issue.

“Without valid evidence, the U.S. jumped to an unwarranted conclusion and made groundless accusations against China,” Li Pengyu, a spokesperson for the Chinese embassy in the U.S., told the Daily Caller News Foundation in a statement.

“Since last year, China’s cybersecurity agencies have released reports revealing the U.S. government’s long-running cyberattacks against China’s critical infrastructure. Such irresponsible policy and practices have exposed global critical infrastructure to huge risks,” Pengyu added.

 

tanstaafl

Has No Life - Lives on TB
Random recent thought I had: Should a university that got hacked/ransomwared be required to take back all its recent computer science degrees? If they can't even protect themselves then why on Earth should we think they can protect anyone else after graduation?
 

sy32478

Veteran Member
Random recent thought I had: Should a university that got hacked/ransomwared be required to take back all its recent computer science degrees? If they can't even protect themselves then why on Earth should we think they can protect anyone else after graduation?
The InfoSec team and the faculty probably never cross paths professionally.
 

OldArcher

Has No Life - Lives on TB

Feds Crack Down On Pernicious Chinese Hacking Group That Targeted US Gov’t, Dissidents​


The U.S. on Monday announced actions aimed at exposing a sweeping Chinese hacking campaign that has targeted U.S. government institutions, critical infrastructure, media and political dissidents for more than a decade.

Wuhan Xiaoruizhi Science and Technology Company, Limited (Wuhan XRZ), served as a front company for China’s Ministry of State Security (MSS), which deals with overseas policing and espionage, allowing Chinese hackers to hide a multitude of malicious cyber operations, the Treasury Department said after sanctioning the organization on Monday in a statement alongside other U.S. agencies and the United Kingdom. In an indictment unsealed separately, the Department of Justice accused Chinese nationals Zhao Guangzong, Ni Gaobin and five others for their role “in furtherance of [China’s] economic espionage and foreign intelligence objectives” over the past 14 years.

DOJ “will not tolerate efforts by the Chinese government to intimidate Americans who serve the public, silence the dissidents who are protected by American laws, or steal from American businesses,” Attorney General Merrick B. Garland said in the press release. “This case serves as a reminder of the ends to which the Chinese government is willing to go to target and intimidate its critics, including launching malicious cyber operations aimed at threatening the national security of the United States and our allies.”

China’s regional security office established Wuhan XRZ in 2010 to carry out cyber operations against “U.S. and foreign politicians, foreign policy experts, academics, journalists, and pro-democracy activists, as well as persons and companies operating in areas of national importance.”

Hackers associated with the group, known variably as Advanced Persistent Threat 31 (APT31), Judgement Panda, and Zirconium, have gone after U.S. government officials and advisers on national security issues in the White House and other federal agencies; both Democrat and Republican members of Congress; the U.S. Naval Academy and the U.S. Naval War College’s China Maritime Studies Institute, according to the press release.

U.S. investigators also tied the group to major attacks on a Texas-based energy company and companies that do research, development and manufacturing for the U.S. military in Tennessee, Alabama and elsewhere.

APT31 has also attacked high-profile individuals connected to the 2020 election, according to Microsoft.

View: https://twitter.com/USTreasury/status/1772290091450257800?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1772290091450257800%7Ctwgr%5E2fa44eebe248e8558321f21747f39403ea254535%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fdailycallernewsfoundation.org%2F2024%2F03%2F25%2Ffeds-crack-down-on-pernicious-chinese-hacking-group-that-targeted-us-govt-dissidents%2F



In 2020, Zhao Guangzong, working as a contractor for Wuhan XRZ, sent seemingly innocuous emails containing disguised malware to administrators at the U.S. Naval Academy, the the U.S. Naval War College’s China Maritime Studies Institute and an unnamed U.S.-based think tank “focused on U.S. national security issues, including in the Asia-Pacific region,” according to the indictment and press releases.

The hacker also carried out similar “spearphishing” attacks on Hong Kong legislators and pro-democracy activists, the U.S. said.

China has denied U.S. accusations of cyberespionage and accuses Washington of hypocrisy over the issue.

“Without valid evidence, the U.S. jumped to an unwarranted conclusion and made groundless accusations against China,” Li Pengyu, a spokesperson for the Chinese embassy in the U.S., told the Daily Caller News Foundation in a statement.

“Since last year, China’s cybersecurity agencies have released reports revealing the U.S. government’s long-running cyberattacks against China’s critical infrastructure. Such irresponsible policy and practices have exposed global critical infrastructure to huge risks,” Pengyu added.

Wanna stop pernicious Chinese hackers? Hire mercenaries, track ’em down, and liquidate. Rinse and repeat. Problem solved.

OA
 

tanstaafl

Has No Life - Lives on TB
I imagine the federal government is quietly hoping that everyone has forgotten that the United States was the first country (teamed with Israel) to use hacking as a national weapon against another country. For those that have forgotten, read up on the Stuxnet attack against Iran. You start throwing mud, you shouldn't be all that surprised if someone throws mud back at you. Or that glass houses thing. Whatever metaphor works for you.
 

9idrr

Veteran Member
I imagine the federal government is quietly hoping that everyone has forgotten that the United States was the first country (teamed with Israel) to use hacking as a national weapon against another country. For those that have forgotten, read up on the Stuxnet attack against Iran. You start throwing mud, you shouldn't be all that surprised if someone throws mud back at you. Or that glass houses thing. Whatever metaphor works for you.
Uh, those who think Stuxnet was the first use of cyber weapons might be mistaken. Odds are that we'll never know who did it originally but it could go all the way back to when Microsnot told us that "bugs" were really features. :whistle:
 

Publius

TB Fanatic
Wanna stop pernicious Chinese hackers? Hire mercenaries, track ’em down, and liquidate. Rinse and repeat. Problem solved.

OA
Find the right U.S. citizens willing to do the job and congress grant them letters of Marque and reprisal in this case would amount to a hunting license to kill and take whatever monetary value they have and allowed to keep some of it for their efforts.
 

tanstaafl

Has No Life - Lives on TB
Uh, those who think Stuxnet was the first use of cyber weapons might be mistaken. Odds are that we'll never know who did it originally but it could go all the way back to when Microsnot told us that "bugs" were really features. :whistle:

I didn't mean hacking in general but hacking as a weapon of one government used against another government. I would be interested if anyone has links to earlier uses than the Stuxnet attack.
 

9idrr

Veteran Member
I didn't mean hacking in general but hacking as a weapon of one government used against another government. I would be interested if anyone has links to earlier uses than the Stuxnet attack.
Spent some time over the last couple of days but couldn't find any trustworthy links. Pretty sure that those folks with real knowledge ain't talkin', at least while any non-disclosure agreements and security clearances come into play. Postin' stuff like that might be like sayin' one has the goods that'd jail the wife of a former POTUS. :whistle:
 

tanstaafl

Has No Life - Lives on TB
Spent some time over the last couple of days but couldn't find any trustworthy links. Pretty sure that those folks with real knowledge ain't talkin', at least while any non-disclosure agreements and security clearances come into play. Postin' stuff like that might be like sayin' one has the goods that'd jail the wife of a former POTUS. :whistle:
Thanks for trying, at least. I have a lot of notes and I'm always looking to correct what I already have or add to them.
 

accountant

Contributing Member
They could have said extremely harmful, or destructive, but Noooo, somebody had to use their new thesaurus.
And thus, I had to look up what pernicious means.

Reading should not require research.

A.
 

9idrr

Veteran Member
Thanks for trying, at least. I have a lot of notes and I'm always looking to correct what I already have or add to them.
Glad I could try to help. I could probably dig up sites through Warez or FourChan to generate some discussion... :cool:
 
Top