Image 01 Image 03

Cyberwar Tag

The Justice Department today announced the indictment of several Chinese military officers over accusations of economic cyber espionage against American companies and organizations. From the Washington Post:
A federal grand jury in Pittsburgh has found that five Chinese People's Liberation Army members hacked into the computers of a number of businesses and organizations in western Pennsylvania -- including U.S. Steel, Westinghouse Electric, and United Steel Workers. According to an indictment unsealed Monday, the Chinese men -- Wang Dong, Sun Kailiang, Wen Xinyu, Huang Zhenyu and Gu Chunhui --  have been collectively charged with 31 crimes. This is the first criminal indictment against state-sponsored hackers who allegedly engaged in cyberespionage for economic purposes, according to the Justice Department. And the FBI said it's just the beginning of a larger crackdown. The government said the accused were members of  PLA Unit 61398, a military group based in Shanghai. Last year in a widely reported investigation, the cybersecurity firm Mandiant identified this group as a source of economic cyberspying. At a press conference Monday morning, government officials alleged the defendants hacked into the computer networks of companies as they engaged in trade disputes or competed against Chinese companies for major contracts -- stealing both technical trade secrets and strategic information. In some cases, the U.S. government alleges, the stolen information was used to benefit Chinese state-sponsored companies.
While many suspect it’s unlikely the accused will ever be brought to justice, U.S. authorities emphasized that they were specifically “exposing the faces and names behind the keyboards in Shanghai used to steal from American businesses.”

The group of pro-Assad hackers calling itself the Syrian Electronic Army hacked The Guardian news outlet over the weekend, marking the latest in a string of cyberattacks from the same organization.  The incident emphasizes the potential threat such attacks could pose if executed for goals far more malicious than intimidation or mere gain of public attention.  And news outlets are among the most useful targets to such groups. The attack on The Guardian was in apparent retaliation for the outlet’s coverage on the conflict in Syria.  Last year, The Guardian also published a cache of emails between Syrian president Bashar al-Assad and his inner circle, in articles that were, not surprisingly, not very flattering of Assad. On April 15th, the same organization hacked NPR and several of its Twitter accounts, also over the outlet's coverage of Syria.  Only days later, the Syrian Electronic Army hacked several of CBS’ Twitter accounts and sent out pro-Syrian propaganda, including false claims that the CIA is arming Al-Qaeda terrorists in Syria. The same week, the group also compromised Twitter accounts of the Associated Press to tweet out a false message, causing the Dow to temporarily plummet.
The false tweet said there had been two explosions at the White House and that President Barack Obama was injured. The attack on AP's Twitter account and the AP Mobile Twitter account was preceded by phishing attempts on AP's corporate network. […] The false tweet went out shortly after 1 p.m. and briefly sent the Dow Jones industrial average sharply lower. The Dow fell 143 points, from 14,697 to 14,554, after the fake Twitter posting, and then quickly recovered.
And in March, several of BBC’s Twitter accounts were also hacked by the same group.  They tweeted out snarky messages such as, “Saudi weather station down due to head-on collision with camel.” But these attacks from the Syrian Electronic Army aren’t limited to recent weeks.

An update on Flame, from BBC: The creators of the Flame malware have sent a "suicide" command that removes it from some infected computers. Security firm Symantec caught the command using booby-trapped computers set up to watch Flame's actions. More technical details at Symantec: Late last week, some Flamer...

This is a little scary, particularly if it were put in the wrong hands. Via The Times of Israel: A new, unprecedented computer virus called “Flame” (or “sKyWIper”) has hit Iran, the West Bank, and other Middle Eastern locations. It is already considered one of the...