08/3/11

Lockheed Martin Get Smart Grid Contract – | They Lied To Us About Hacks

Bloomberg reported June 30,2011 “Lockheed Promises Electric-Grid Security”. So let me get this straight Lockheed- that got hacked 3-4 months ago (Lockheed hack should put U.S. on high alert) is going to protect our most critical infrastructure from hacker intrusions and attacks on their electronic systems that control our Power Grid. In this article about the hack that happened they claimed “Lockheed detected the “significant and tenacious” threat “almost immediately” and no customer, program or employee information was compromised, according to a statement from the company”…

BULLSHIT –facts: China hacked Lockheed Martin login information and passwords to exploit the company’s SecurID-protected system. That’s heavy hacking boy and girls not your low hanging cyber fruit of Anonymous and LulzSec. These were strategic targeted hacks by the “Online Blue Team” (PLA Cyber Attack Team, Jinan, China) (U.S. Goes On Offense Cyber Attacks from China)

From the news:

So here we have a company that is in charge of our National Defense and they’re lying about the hacks committed by China. Am I the only person that sees the insanity? The politico’s have been scaring us about terrorist hacking our electric grid.

Maybe Lockheed should have the contract; I just don’t like it when they lie to us and then take our TAX dollars. The government is bigger than the people, we need to Vote to stop that. We have to protect cyberspace for ourselves and for the world. America created the basics of the web. The Internet took us to the next level, but cyberspace belongs to the people of the world. It’s our responsibility as Net-Citizens to enable another Arab Springs in other places. Free Speech in cyberspace must be maintained, it will unite us, and it makes us free.

As for Lockheed people like gatoMalo and others in the security field will monitor the good gato’s as well as the bad gato’s.

My 2© cents – gatoMalo_at_uscyberlabs_dot_com

http://USCyberLabs.com/blog/

http://ChinaCyberWarfare.wordpress.com

http://HacktivistBlog.wordpress.com/

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/29/11

China sets up “Online Blue Army”

Chinese military has set up ”Online Blue Army”, a dedicated web network aimed to beef up internet security of its defence installations from cyber attacks.

The “Online Blue Army” is based on the Peoples Liberation Army, PLA needs and enforcing the ability of Internet security protection is an important issue in its military training programs, Chinese Defence Ministry spokesman Geng Yansheng said.

Gengs comments came in response to questions if the “Online Blue Army” is Chinas Internet squad aimed at carrying out attacks on other countries Internet systems, state run Peoples Daily reported. Geng said his country will not carry out cyber wars.

The PLA Daily had reported PLAs Guangzhou command had invested tens of millions of yuan in building the specialized Internet squad.

Geng said Internet security has become an international concern which affects not only the society but the military sector, adding that China, armed with comparatively lax online security protection is among the victims of Internet attacks.

The Daily said internationally, online military units have long been established. The United States destroyed Iraq’s air defence system using PC viruses during the Gulf War in 1991. Thereafter, the online army of the United States also played major roles in the wars in Kosovo and Iraq.

In addition to the United States, UK, Russia, Japan and India have established their online military units, Peoples Daily report said.

Li Li, a military expert at the National Defence University, said that compared with online military units of Western countries, China’s “Online Blue Army” is currently at its fledging period, and is more like an online manoeuvre mode than an organic, large-scale online army.

Zhang Shaozhong, a military expert and a professor from the PLA National Defence University, pointed out that though China’s dependence on the Internet is increasing, the root servers are not based in China.

In addition, various types of Internet hardware in China are made in the United States, including many types of software.

In this sense, China is only a computer “user,” and China’s Internet security is very fragile, he said.

“Just like the army and air forces, the ‘online blue army’ is a historical necessity. The reason is very simple.

“We must adapt to the new types of warfare in the information era. The ‘online blue army’ is of great strategic significance to China’s economic development and social stability,” Teng Jianqun, a research fellow at the China Institute of International Studies, said.

 

via China sets up “Online Blue Army”.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/21/11

U.S. to Probe Alleged Chinese Hack of Senior Officials’ Gmail Accounts – ABC News

 

 

 

 

The U.S.government is “very concerned” about Google’s claim that the personal email accounts of senior U.S. officials and military leaders might have been breached in a phishing attack originating in China, Secretary of State Hillary Clinton said today.

“These allegations are very serious,” she told reporters, adding that the FBI will investigate the matter. “We take them seriously. We are looking into them.”

Google said Wednesday it had evidence of a phishing attack – in which users are tricked into revealing their passwords or into clicking on a link that can infect their computer with a virus — that appeared to target specific individuals to access their email accounts.

“We recently uncovered a campaign to collect user passwords, likely through phishing,” the company said on its official blog. “This campaign, which appears to originate from Jinan, China, affected what seem to be the personal Gmail accounts of hundreds of users including, among others, senior U.S. government officials, Chinese political activists, officials in several Asian countries (predominantly South Korea), military personnel and journalists.”

Clinton declined to provide additional information about the incident, citing the sensitivity of the ongoing investigation, but said Google notified the State Department of what it had found prior to the public announcement.

“The goal of this effort seems to have been to monitor the contents of these users’ emails,” Google said, adding that it had disrupted the efforts and notified the victims and government authorities.

The Chinese government has denied any involvement in the attack. Such allegations are “groundless and with an ulterior motive,” a Foreign Ministry official reportedly said.

One cabinet-level official is among those affected by the phishing campaign, the Washington Post reported today. The Post also cited unnamed officials as saying that while no government email accounts were breached, a trove of emails was accessed and they are unable to tell whether any official business was discussed using the personal email accounts.

The incident is unlikely to be the last such cyber attack, Clinton said, warning that the U.S. government must be ready for the next one.

“We know this is going to be a continuing problem and therefore we want to be as prepared as possible to deal with these matters when they come to our attention,” she said.

Clinton was careful not to accuse the Chinese government of any wrongdoing, but the incident will do little to ease recent tensions between Beijing and Washington.

In an effort to begin to smooth things over, Clinton and Treasury Secretary Timothy Geithner hosted senior Chinese officials in Washington last month for high-level talks. Military leaders from both sides followed up with talks of their own and outgoing Defense Secretary Robert Gates arrived today in Singapore where he will meet with his Chinese counterpart during an annual defense conference.

Separately, the Pentagon is soon expected to publish a report stating that a cyber attack could be considered an act of war, just like a conventional offensive, and therefore could merit a military response.

“A response to a cyber incident or attack on the U.S. would not necessarily be a cyber response; all appropriate actions would be on the table if we are attacked in cyber,” Pentagon spokesman Col. David Lapan told reporters Tuesday.

 

 

U.S. to Probe Alleged Chinese Hack of Senior Officials’ Gmail Accounts – ABC News.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/13/11

US & China struggle for global supremacy

A new front is opening up between China and the US in their struggle for global supremacy. Cyber attacks from China seem to be increasing, as exemplified by Google’s recent accusations that it has uncovered a campaign run from inside China to secretly monitor the Gmail accounts of top-ranking US government officials and military personnel, South Korean officers and other users. The hackers allegedly used a phishing campaign to trick users into revealing their passwords. Though the Chinese government has denied the accusations as “a fabrication out of thin air”, the US secretary of state, Hillary Clinton, has described Google’s claims as “very serious”.

Google claimed that the attacks appeared to originate from Jinan — it is home to a military vocational school, the computers of which were linked to a more sophisticated assault on Google’s systems a few months ago. This is the most serious claim of China-based Internet intrusion since a previous incident involving the company last year when it decided to redirect users in mainland China to its search engine based in Hong Kong. The decision put the Internet search giant, which has a huge financial stake in China, on a collision course with Beijing. Google and the Chinese government have clashed repeatedly over the past year. China blocked one of Google’s sites, YouTube, in March last year in an apparent attempt to stop people in China from viewing videos of anti-government protests by Tibetans and Uighurs. The security of commercial networks became a major issue as Google accused China of stealing intellectual property online and compromising the Gmail accounts of Chinese human rights activists.

The latest dispute is happening at a time of heightened sensitivity about cyber disputes and even warfare. Sony suffered an attack from hackers; Lockheed Martin faced cyber attacks that are now being investigated by the FBI; and last month Sony Corporation had to briefly close down its PlayStation network after an intrusion by yet-to-be-identified hackers that put at risk the credit card information of about 70 million users.

Meanwhile, facing criticism from the US, China decided to go on an offensive. In an attempt to divert attention from allegations of online attacks on Western targets originating in China, the Chinese military accused Washington of launching a global “Internet war” to bring down Arab and other governments. In line with this, the Chinese military planners have asked their government to make preparations to fight this “Internet war” which is a product of the new information age. In an article, Chinese military scholars have suggested that China needs to “express to the world its principled stance of maintaining an ‘Internet border’ and protecting its ‘Internet sovereignty’, unite all advanced forces to dive into the raging torrent of the age of peaceful use of the Internet, and return to the Internet world a healthy, orderly environment.”

Facing an onslaught of cyber attacks, the US department of defence has made it clear that cyber attacks by any foreign nation may be considered an “act of war”. And the UK’s latest national security strategy lists cyber attacks as one of the most significant security threats facing the nation. In view of these developments, some are advocating the negotiation of an international “non-proliferation” treaty to counter a new cyber arms race between nations.

China is investing in new technologies for cyber and space warfare, primarily to counter America’s traditional advantages. Beijing has made its intention clear of focusing on the development of asymmetric capabilities that include electronic warfare, shaping the battle space with information dominance and using new technology not available to great powers that modernised earlier. China has been probing the computer networks of its adversaries for some time now, investing heavily in electronic counter measures and envisaging concepts like computer network attack, computer network defence and computer network exploitation. Its industrial and defence espionage is aimed at obtaining advanced technology for economic and military modernisation. China has been giving cyber warfare serious thought and has incorporated it into its military planning and strategy by encouraging civilian computer crackers to penetrate the computer networks of key political and military leaders in countries ranging from the US, Japan and Taiwan, to South Korea and India.

The issue of how governments should respond to or help prevent cyber attacks against private enterprises as well as state assets is one of the most difficult security issues facing policy-makers today. India is no stranger to cyber warfare. China’s penetration into the Indian intelligence apparatus has been growing. The National Informatics Centre, which governs and hosts all government websites, as well as computers of the Prime Minister’s Office, several Indian embassies, the Bhabha Atomic Research Centre and the Dalai Lama’s office were infected by GhostNet, a China-based cyber espionage network. Though this came to light in early 2009, it had been going on for the past several years. The Indian military lacks the expertise and resources to defend the country adequately from concerted cyber attacks even as cyber criminals, terrorists and other nations are getting better at penetrating state and private networks, whether to spy, to steal data or damage critical infrastructure. It is time.

via Phishing ground – Indian Express.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/12/11

The Alarming Growth of Global Cyber Menace – Hacking | Asian Tribune

When gmail accounts of some of the US state officials were hacked two weeks ago, the Defence Department categorized any serious cyber attack, as an act of war. Since Google had tracked down the source of the attack to a certain province in China, it was all too clear that the Pentagon was not beating about the bush while taking the cyber threat seriously. The gmail attack came hot on the heels of another high-profile attack – Lockheed Martin Corporation, the high-tech defence firm.Having been annoyed by implicit accusation, China hit back at Google by warning that the company would face the music, if it accused the Chinese government of covert involvement.

The disturbing cyber nuisance did not end there. The servers of

Sony

, the entertainment giant, were subjected to two successive hacking within a matter of days. On the first occasion – the more serious one – the accounts of millions of had been hacked into and then details were stolen; the servers of

Nintendo

suffered the same fate. On June 3, the servers of

Codemasters

, the largest UK game publisher, were hacked. The hackers did not spare even the

National Health Service

of the UK; there has been a breach of security in some servers, according to media reports.

The spate of attacks has pushed millions of online users, not necessarily the folks who play games, into a state of perpetual anxiety. Since the hackers have been able to stay a few rungs above the security experts along the learning curve, it’s high time the threat was treated as something against the whole online community, not just selected strata of it.

The companies, which have been affected, are counting the cost in terms of loss of both revenue and reputation. Although, they assure the customers of better security mechanisms in future – and when the horse had left the barn, of course – restoring customer confidence is going to be an uphill struggle for the companies in question.

According to the details that came out so far, the hacking had been performed by duping the customers into web pages which looked identical to what they normally had been familiar with; once signed in, they had been taken for a ride, to say the least.

So, the companies affected implied that the customers should not have done that; well, how do ordinary folks distinguish between a real one and a fake one, when they look almost similar? The explanations have not gone far enough to address the serious side of the issue; all they can say is warning the public to be on their guard at all times – and they already are.

These high profile hackings are not the works of adventurous individuals, carried out in their bedrooms as a way of fighting boredom. Nor are they the works of teenagers, who could spare hours on computers in typing in endless combinations of characters into login names and passwords, in the hope that one of them would make them lucky by pure chance – one day. The nature of sophistication clearly shows the involvement of highly organized individuals – perhaps, with a substantial technical background – who are prepared to break hell lose, if they can get away with it.

The two groups, which are at the forefront of hacking, are Anonymous and LulzSec. The former claims to be a ‘leaderless structure’ while the latter introduces itself as the ‘world’s leaders in high-quality entertainment at your expense.’ Who can disagree with them?

Anonymous has been in the habit of hacking into government websites in order to teach them a ‘lesson’; it was at its peak of activities, known as ‘hacktivity’, when Wikileaks were coming out in dribs and drabs. LulzSec, meanwhile, claims that since fun is restricted to Fridays, they are going to extend it beyond that – and to the weekend. Whether what is fun for LulzSec, is certainly fun for everyone, remains to be seen in the days ahead!

In addition, there are clumsy hackers too. I keep getting an email from one such stupid hacker, who is in the habit of urging me to collect a parcel from a well-known courier service while clicking on a link provided. However, he could not completely conceal the tentacles of idiocy: the ‘To’ field of the email consists of a chain of email addresses, not just mine. So, I decided to keep getting the emails for academic purposes, without diverting them into a spam folder.

If a user can be duped by such an email, then of course, big companies cannot be blamed for mistakes of that kind. In short, users have to be a bit responsible too while login into similar-looking web sites and opening unsolicited emails.

As the menace of hacking reached fever pitch, some countries in South East Asia have started cracking down on potential hackers – finally. The arrests have been made in Malaysia, Indonesia and Taiwan. However, this is just the tip of the colossal iceberg.

The geography of the places where hackers were found, the time taken before the action being carried out and the abundance of other regional criminal activities, do not paint a serene picture for the online community in particular, and the law-abiding global citizens in general.

If the governments in question keep treating the threat as trivial or non-existent, the trend can easily give a cumulative nasty shock for all of us at an unexpected time – something from which we may not recover without paying a heavy collective price.

via The Alarming Growth of Global Cyber Menace – Hacking | Asian Tribune.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/12/11

The Alarming Growth of Global Cyber Menace – Hacking | Asian Tribune

When gmail accounts of some of the US state officials were hacked two weeks ago, the Defence Department categorized any serious cyber attack, as an act of war. Since Google had tracked down the source of the attack to a certain province in China, it was all too clear that the Pentagon was not beating about the bush while taking the cyber threat seriously. The gmail attack came hot on the heels of another high-profile attack – Lockheed Martin Corporation, the high-tech defence firm.Having been annoyed by implicit accusation, China hit back at Google by warning that the company would face the music, if it accused the Chinese government of covert involvement.

The disturbing cyber nuisance did not end there. The servers of

Sony

, the entertainment giant, were subjected to two successive hacking within a matter of days. On the first occasion – the more serious one – the accounts of millions of had been hacked into and then details were stolen; the servers of

Nintendo

suffered the same fate. On June 3, the servers of

Codemasters

, the largest UK game publisher, were hacked. The hackers did not spare even the

National Health Service

of the UK; there has been a breach of security in some servers, according to media reports.

The spate of attacks has pushed millions of online users, not necessarily the folks who play games, into a state of perpetual anxiety. Since the hackers have been able to stay a few rungs above the security experts along the learning curve, it’s high time the threat was treated as something against the whole online community, not just selected strata of it.

The companies, which have been affected, are counting the cost in terms of loss of both revenue and reputation. Although, they assure the customers of better security mechanisms in future – and when the horse had left the barn, of course – restoring customer confidence is going to be an uphill struggle for the companies in question.

According to the details that came out so far, the hacking had been performed by duping the customers into web pages which looked identical to what they normally had been familiar with; once signed in, they had been taken for a ride, to say the least.

So, the companies affected implied that the customers should not have done that; well, how do ordinary folks distinguish between a real one and a fake one, when they look almost similar? The explanations have not gone far enough to address the serious side of the issue; all they can say is warning the public to be on their guard at all times – and they already are.

These high profile hackings are not the works of adventurous individuals, carried out in their bedrooms as a way of fighting boredom. Nor are they the works of teenagers, who could spare hours on computers in typing in endless combinations of characters into login names and passwords, in the hope that one of them would make them lucky by pure chance – one day. The nature of sophistication clearly shows the involvement of highly organized individuals – perhaps, with a substantial technical background – who are prepared to break hell lose, if they can get away with it.

The two groups, which are at the forefront of hacking, are Anonymous and LulzSec. The former claims to be a ‘leaderless structure’ while the latter introduces itself as the ‘world’s leaders in high-quality entertainment at your expense.’ Who can disagree with them?

Anonymous has been in the habit of hacking into government websites in order to teach them a ‘lesson’; it was at its peak of activities, known as ‘hacktivity’, when Wikileaks were coming out in dribs and drabs. LulzSec, meanwhile, claims that since fun is restricted to Fridays, they are going to extend it beyond that – and to the weekend. Whether what is fun for LulzSec, is certainly fun for everyone, remains to be seen in the days ahead!

In addition, there are clumsy hackers too. I keep getting an email from one such stupid hacker, who is in the habit of urging me to collect a parcel from a well-known courier service while clicking on a link provided. However, he could not completely conceal the tentacles of idiocy: the ‘To’ field of the email consists of a chain of email addresses, not just mine. So, I decided to keep getting the emails for academic purposes, without diverting them into a spam folder.

If a user can be duped by such an email, then of course, big companies cannot be blamed for mistakes of that kind. In short, users have to be a bit responsible too while login into similar-looking web sites and opening unsolicited emails.

As the menace of hacking reached fever pitch, some countries in South East Asia have started cracking down on potential hackers – finally. The arrests have been made in Malaysia, Indonesia and Taiwan. However, this is just the tip of the colossal iceberg.

The geography of the places where hackers were found, the time taken before the action being carried out and the abundance of other regional criminal activities, do not paint a serene picture for the online community in particular, and the law-abiding global citizens in general.

If the governments in question keep treating the threat as trivial or non-existent, the trend can easily give a cumulative nasty shock for all of us at an unexpected time – something from which we may not recover without paying a heavy collective price.

via The Alarming Growth of Global Cyber Menace – Hacking | Asian Tribune.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/8/11

China Cyber Attack Fallacies | Flashpoints

Google recently announced a spear phishing campaign that had been going on for over a year and ‘which appears to originate from Jinan, China’ that targeted the personal Gmail accounts of hundreds of various persons of interest, presumably to the Chinese government.

 

Chinas Blue TeamThe proof to support the headline was that Chinese IP addresses were involved. What both Google and Siobhan Gorman, who reported on the story for the Wall Street Journal, failed to disclose was that other countries IP addresses were used as well, including South Korea and the United States. Copies of the spoofed emails, along with the originating IPs, were disclosed back in February on the Contagio blog. Of the six IP addresses used in the military and government employee phishing scheme, two were from Hong Kong, two were from Beijing, one was from Seoul, and one was from New York:

1) 113.28.117.4: Hong Kong (PCCW Business Internet Access)

2) 115.160.146.16: Hong Kong (Wharf TT Ltd)

3) 218.56.241.32:  Beijing (China Unicom)

4) 218.56.239.206: Beijing (China Unicom)

5) 61.106.26.226: Seoul (Korea NIC)

6) 69.147.251.108: New York (Nobis Technology Group LLC)

In 2010, Telegeograhy rated China Telecom (55 million customers) and China Unicom (40 million customers) as the two largest ISPs in the world, serving 20 percent of all broadband customers on earth. And neither company restricts its customer base to residents of the People’s Republic of China. Anyone can buy server time on any of these mainstream Chinese ISPs: China Telecom; China Mobile; China Unicom; and HiChina Zhicheng Technology Ltd.

Payment per year ranges from 5,000 yuan to 25,000 yuan ($770 to $3,860), and can be made via bank online transfer, domestic and international wire, Alipay (China’s Paypal), and even cash in certain cities such as Beijing and Guangzhou. In other words, no matter where in the world you live, you can lease server time and set up an email account that will resolve to China. And if you use it to phish the Gmail accounts of your targets, you’ve hit the gold standard of mis-direction because there’s almost no alternative analysis done anymore when it comes to attacks that geolocate to an IP address in China.

Google may have chosen to focus on the two IP addresses that resolved to Jinan, the capital of Shandong Province, because its home to Lanxiang Vocational School, which was associated with the Google attacks of December 2009 to January 2010 and because it has a PLA regional command centre. The problem with this is that Jinan is a high-tech industrial zone with more than 6 million people and more than a dozen universities. Sourcing an email to Jinan is like sourcing a fruit shipment to California’s Central Valley. It wasn’t good evidence back in January, 2010 and it’s no better now.

There are at least a dozen foreign governments that I can think of who have a vested interest in reading the personal email accounts of US China policy makers, military leaders, government officials, etc. and all of them are standing up Cyber Commands and enjoy the benefit of their own nationalistic hacker crews from time to time.

None of this rules China out as the responsible party, of course. I’m simply arguing for a higher bar of evidence before making the leap that China did it. One alternative method, for example, is to try to answer why the spear phishing attack was done. Once you have a clear grasp as to why, you can move on to creating a list of those who would benefit, and then look for reasons that might exclude each member of that list. The discipline of alternative analysis has been a difficult one to adopt even among those who do it for a living within the intelligence community because our individual perceptions are highly biased in favour of something called mirror-imaging; i.e., we imagine that everyone sees things as we do.

Another obstacle to alternative analysis is fear: the feat of being wrong; of looking silly; of taking an unpopular stand and suffering the consequences; and so on. Now that the Pentagon has determined that a cyber attack may be sufficient to justify a kinetic response, it’s imperative that corporate leaders like Google, government leaders like the US Secretary of State, and influential media exercise more due diligence before leaping to conclusions that may have harmful, possibly irreversible, international repercussions.

via China Cyber Attack Fallacies | Flashpoints.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/8/11

Google’s Big Trouble in China Over Gmail Hacks

Google was hammered by China’s Communist newspaper for accusing the Chinese government of hacking into Gmail accounts. The publication claimed Google was trying to stir political unrest between China and the U.S.

A Chinese government newspaper took issue with Google’s accusation that it had traced cyber-attacks on Gmail accounts to that country, claiming that the search-engine giant was simply trying to stir political unrest.

Google (NASDAQ:GOOG) June 1 disrupted a phishing scam that duped senior U.S. government officials, Chinese political activists and others into giving up their Gmail passwords so that an attacker could read and forward their email messages.

The attack affected hundreds of users and appeared to hail from Jinan, China, which is home to one of the People’s Liberation Army’s technical reconnaissance bureaus, or China’s equivalent of the National Security Agency in the United States.

Google’s implication was that the Chinese government was behind the attacks. Hong Lei, spokesman for China’s Ministry of Foreign Affairs, denied his government had anything to do with the attacks, calling them “fabrication out of thin air” and “unacceptable.”

The People’s Daily, which writes on behalf of China’s Communist Party, said June 6 that Google made its claims out of “a vicious intent of sparking new disputes concerning Internet security between China and the U.S,” according to The Wall Street Journal.

People’s Daily editor Zhang Yixuan also lobbed a veiled threat at the search-engine company when he wrote in the front-page editorial: “Google shouldn’t engulf itself in the international political war as a tool for political gaming,” If there is “any change in the international atmosphere, I am afraid Google will become a target to be sacrificed by politics, and also will be discarded by the market.”

The implication is that Google would lose more face, political capital and market share if it pursued its allegations against the country. There is precedent for this.

The company lost search market share to market leader Baidu after tracing cyber-attacks on Gmail accounts of Chinese dissidents and human-rights activists to China. Google, which threatened to exit China entirely, ceased censoring search results there and sent users to the Google.hk domain in Hong Kong.

Google, which passed its evidence of the Gmail hacks along to the FBI, declined to comment directly on the editorial. However, a spokesperson told eWEEK: “We think users should be aware of the disturbing campaign we’ve uncovered to collect user passwords and monitor user email. Our focus now is on protecting our users and making sure everyone knows how to stay safe online.”

Meanwhile, House Oversight Committee Chairman Darrell Issa (R-Calif.) wrote to Google CEO Larry Page on Monday requesting more information on the Gmail phishing attacks. Issa asked Google not only to name all federal employees targeted in the attack, but also to disclose all communications related to Google’s response.

Google told eWEEK it is reviewing Issa’s letter, adding: “We believe that discussing security issues facing our industry helps users better protect themselves from phishing scams and other common threats.”

.

via Google’s Big Trouble in China Over Gmail Hacks – Security – News & Reviews – eWeek.com.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/8/11

MoD faces daily cyber-attacks, Liam Fox says – Telegraph

Warning that Britain is now in continuous combat with an “invisible enemy” in cyberspace, the Defence Secretary said that the MoD last year detected and blocked more than 1,000 “potentially serious” attempts to infiltrate or disrupt its computer systems.

Speaking to the London Chambers of Commerce defence industry dinner, Dr Fox said electronic attacks on Britain doubled from 2009 to 2010. “There is a continuous battle being waged against us, day in, day out,” he said.

Dr Fox’s remarks are the latest Government warning about the scale and severity of electronic attacks on sensitive State computer networks. George Osborne, the Chancellor, last month said that Government computers are receiving more than 20,000 malicious email attacks every month.

The MoD and its highly sensitive electronic networks are a prime target for people trying to steal secrets or damage critical systems.

“Our systems are targeted by criminals, foreign intelligence services and other malicious actors seeking to exploit our people, corrupt our systems and steal information,” Dr Fox said. “The risks to defence are real, and I take them very seriously.”

Dr Fox did not disclose details about who is behind the electronic attacks, but officials say that cyber attackers include both private hackers and those working directly for foreign governments including China.

Last week, Google said it had discovered an attempt to steal the email passwords of hundreds of its email account holders, including US government officials, Chinese human rights activists and journalists.

US Computer security experts say the number of attacks emanating from China has jumped in recent months

As well as Government systems, major defence companies and other companies are under attack, the minister said, suggesting that successful electronic attacks on the defence industry would have both economic and strategic impact.

“Our national intellectual property in defence and security industries is at risk from a systematic marauding,” he said. “Not only could it severely affect the future success of British industry, our economic advantage, and the country’s financial recovery – but also directly impacts upon our national security today.

“This threat is growing in scale and sophistication – my Department is a prime target,” Dr Fox said, urging businesses and individuals to be vigilant.

“This is the war of the invisible enemy. Success cannot be achieved by government alone because, in cyber space, there are few boundaries between government, business and every individual internet user.”

Even as it cut many conventional forces, last year’s Strategic Defence and Security Review boosted British spending on cyberwarfare by £650 million. The money will pay for a new Global Operations and Security Control Centre to co-ordinate electronic defences, Dr Fox said.

Nick Harvey, Dr Fox’s deputy, last week revealed that as well as bolstering the UK’s defences against electronic attack, the programme will also involve the development of offensive capabilities, electronic weapons Britain could deploy against other states.

via MoD faces daily cyber-attacks, Liam Fox says – Telegraph.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
06/7/11

US probes Google hints of China cyber-spying

US probes Google hints of China cyber-spying

Google says it has uncovered a campaign to collect Gmail passwords, but has stopped short of directly blaming China. [Reuters: Clay McLachlan]
PHOTO

Google says it has uncovered a campaign to collect Gmail passwords, but has stopped short of directly blaming China. [Reuters: Clay McLachlan]

VIDEO from Australia Network News

Cyber hacking

Created: Fri, 03 Jun 2011 11:29:53 GMT-0400

AUDIO

Australia cyber white paper to secure internet

Created: Fri, 03 Jun 2011 11:29:53 GMT-0400

Last Updated: Fri, 3 Jun 2011 18:31:00 +1000

The United States Government is investigating suggestions from Google that a cyber-spying campaign originated in China. 

US Secretary of State Hillary Clinton says the FBI will investigate Google’s claims that suspected Chinese hackers tried to access the Gmail accounts of senior US officials by stealing passwords. 

“These allegations are very serious. We take them seriously, we are looking into them,” she told reporters. 

The Gmail accounts of Chinese activists and journalists were also reportedly targeted. 

The claim has sparked an angry response from the Chinese Government, which has denied any involvement in the alleged hacking attack on Google’s email system. 

Chinese foreign ministry spokesman Hong Lei says to put all of the blame on China is “unacceptable”.

“The Chinese Government has always opposed any kind of criminal activity that tries to harm the internet,” he said.

“The so-called allegation that the Chinese Government supports hacking attacks is completely fabricated with ulterior motives.”

Google statement


A statement from Google does not specifically point the finger of blame at Chinese authorities.

“We recently uncovered a campaign to collect user passwords, likely through phishing,” Google security team engineering director Eric Grosse said in a blog post.

“The goal of this effort seems to have been to monitor the contents of these users’ emails, with the perpetrators apparently using stolen passwords to change peoples’ forwarding and delegation settings,” he said.

Those affected included senior US government officials, Chinese political activists, military personnel, journalists and officials in several Asian countries, predominantly South Korea, Mr Grosse said.

“Google detected and has disrupted this campaign to take users’ passwords and monitor their emails,” Mr Grosse said.

“We have notified victims and secured their accounts. In addition, we have notified relevant government authorities.”

The “phishing” ruse used to trick Gmail users into revealing account names and passwords reportedly involved sending booby-trapped messages that appeared to come from legitimate associates, friends or organisations.

Google says the California-based firm’s systems and servers were not attacked.

There is no indication whether the Gmail spying campaign was related to a China-based cyber attack on Google that prompted the company in 2010 to stop bowing to internet censors and reduce its presence in the country.

Google had initially threatened to close its Chinese operations altogether because of censorship and cyber attacks it said originated from China.

At that time, Beijing virulently denied any state involvement in the cyber attacks that Google said targeted email accounts of Chinese human rights activists, saying such claims were “groundless”.

ABC Radio Australia News:Stories:US probes Google hints of China cyber-spying.

Share on TwitterShare on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit