- Tickets linked to stolen passports purchased by Iranian middleman
- More than 3,500 police planned for Boston Marathon
- Real-life Dr. Doolittle to reveal how to talk to animals
- Climate change could bring back smallpox, researchers say
- Shoe-bomb witness to speak from London at N.Y. trial
- New evidence could threaten Army sex assault case
- George Zimmerman signs autographs at Orlando gun show
- GOP lawmaker faces fire for NBA crime tweet
- Taliban vow to ‘use all force’ to disrupt Afghan elections
- Atheists sue to remove ‘Ground Zero Cross’ from 9/11 museum
US ready to strike back against China cyberattacks
WASHINGTON (AP) - As public evidence mounts that the Chinese military is responsible for stealing massive amounts of U.S. government data and corporate trade secrets, the Obama administration is eyeing fines and other trade actions it may take against Beijing or any other country guilty of cyberespionage.
According to officials familiar with the plans, the White House will lay out a new report Wednesday that suggests initial, more-aggressive steps the U.S. would take in response to what top authorities say has been an unrelenting campaign of cyberstealing linked to the Chinese government. The officials spoke on condition of anonymity because they were not authorized to speak publicly about the threatened action.
The White House plans come after a Virginia-based cybersecurity firm released a torrent of details Monday that tied a secret Chinese military unit in Shanghai to years of cyberattacks against U.S. companies. After analyzing breaches that compromised more than 140 companies, Mandiant has concluded that they can be linked to the People's Liberation Army's Unit 61398.
Military experts believe the unit is part of the People’s Liberation Army’s cyber-command, which is under the direct authority of the General Staff Department, China’s version of the Joint Chiefs of Staff. As such, its activities would be likely to be authorized at the highest levels of China’s military.
The release of Mandiant’s report, complete with details on three of the alleged hackers and photographs of one of the military unit’s buildings in Shanghai, makes public what U.S. authorities have said less publicly for years. But it also increases the pressure on the U.S. to take more forceful action against the Chinese for what experts say has been years of systematic espionage.
“If the Chinese government flew planes into our airspace, our planes would escort them away. If it happened two, three or four times, the president would be on the phone and there would be threats of retaliation,” said former FBI executive assistant director Shawn Henry. “This is happening thousands of times a day. There needs to be some definition of where the red line is and what the repercussions would be.”
Henry, now president of the security firm CrowdStrike, said that rather than tell companies to increase their cybersecurity the government needs to focus more on how to deter the hackers and the nations that are backing them.
James Lewis, a cybersecurity expert at the Center for Strategic and International Studies, said that in the past year the White House has been taking a serious look at responding to China, adding that “this will be the year they will put more pressure on, even while realizing it will be hard for the Chinese to change. There’s not an on-off switch.”
The Chinese government, meanwhile, has denied involvement in the cyber-attacks tracked by Mandiant. Instead, the Foreign Ministry said that China, too, is a victim of hacking, some of it traced to the U.S. Foreign Ministry spokesman Hong Lei cited a report by an agency under the Ministry of Information Technology and Industry that said in 2012 alone that foreign hackers used viruses and other malicious software to seize control of 1,400 computers in China and 38,000 websites.
Cybersecurity experts say U.S. authorities do not conduct similar attacks or steal data from Chinese companies, but acknowledge that intelligence agencies routinely spy on other countries.
In its report, Mandiant said it traced the hacking back to a neighborhood in the outskirts of Shanghai that includes a white 12-story office building run by the PLA’s Unit 61398.
Mandiant said there are only two viable conclusions about the involvement of the Chinese military in the cyberattacks: Either Unit 61398 is responsible for the persistent attacks or they are being done by a secret organization of Chinese speakers with direct access to the Shanghai telecommunications infrastructure who are engaged in a multi-year espionage campaign being run right outside the military unit’s gates.
“In a state that rigorously monitors Internet use, it is highly unlikely that the Chinese government is unaware of an attack group that operates from the Pudong New Area of Shanghai,” the Mandiant report said, concluding that the only way the group could function is with the “full knowledge and cooperation” of the Beijing government.
TWT Video Picks
Taxpayers must pay the freight for over-budget train projects
- Kim Jong-un calls for execution of 33 Christians
- Senate Democrats, Republicans spar over restoring unemployment benefits
- CURL: Today's GOP really is Reagan's 'Big Tent' party
- Mitch McConnell on beating tea party: 'We are going to crush them'
- Charges filed against accused 'shadow campaign' financier
- SAUERBREY: Taxing Marylanders until they flee
- DHS accused of holding U.S. citizen at airport, using emails to pry into her sex life
- Atheists sue to remove 'Ground Zero Cross' from 9/11 museum
- Rand Paul wins 2014 CPAC straw poll, Ted Cruz finishes a distant second
- As Crimea falls, Obama takes Key Largo golf vacation, Biden hits Virgin Islands
Pope Francis meets his 'mini-me'
Celebrity deaths in 2014
Winter storm hits states — again