Global Espionage? Chinese Cyber Centre Accuses U.S. of Tech Firm Hacks

 

U.S. Accused of Cyberattacks and Trade Secret Theft by Chinese Cybersecurity Centre

A Chinese cybersecurity organization has accused the United States of conducting cyberattacks to steal business secrets from a research center and a high-tech data company. The allegations come amidst a U.S. national security investigation into the Chinese router manufacturer TP-Link, further escalating cyber tensions between the two nations.

The National Computer Network Emergency Response Technical Team/Coordination Centre of China (CNCERT/CC), a non-governmental body dedicated to monitoring cybersecurity threats, issued a statement on Wednesday outlining the alleged cyber activities. The claims were widely disseminated through Chinese state media.

Cyberattacks Target Chinese Entities

CNCERT/CC reported that since August, an advanced material design research unit had been the target of suspected cyberattacks by U.S. intelligence agencies. According to the organization, attackers exploited a vulnerability in an electronic document security management system to infiltrate the company’s server. A Trojan horse virus was subsequently deployed to over 270 hosts via a software update service. The virus allegedly allowed attackers to control these systems and steal sensitive commercial secrets.

Another incident occurred in May 2023, targeting a high-tech enterprise specializing in smart energy and digital information. The attackers reportedly exploited a breach in Microsoft Exchange software to compromise the company’s email server. Back-door programs were implanted in the server, enabling the theft of email data and control over more than 30 devices. The goal, according to CNCERT/CC, was the acquisition of commercial secrets.

Broader Cybersecurity Landscape

In its latest weekly report, CNCERT/CC detailed its efforts to address cybersecurity threats. The center coordinated with cloud service providers, domain name registration organizations, app stores, and international partners to resolve 146 network security incidents, including 92 cross-border cases. The report identified 2,950 data security breaches and highlighted vulnerabilities in several software programs, such as Adobe Illustrator, Android, IBM Cognos Controller, and Apache NimBLE.

Rising U.S.-China Cyber Tensions

Cyber accusations between the U.S. and China have been a recurring issue in recent years. The U.S. government has intensified efforts to restrict China-linked technology firms, citing potential risks to U.S. networks and data. On Wednesday, media outlets reported that the U.S. had initiated an investigation into TP-Link following allegations that its devices were compromised in Chinese cyberattacks.

Earlier this month, a senior White House official claimed that a Chinese hacking campaign had affected at least eight U.S. telecom companies and numerous other countries. Beijing has consistently denied such allegations, with the Chinese embassy in Washington urging the U.S. to halt its own cyberattacks and refrain from using cybersecurity issues to tarnish China’s image.