On September 5, 2022, China accused Washington of breaking into computers at a university that US officials say does military research, adding to complaints by both governments of rampant online spying against each other.
China’s National Computer Virus Emergency Response Center announced that Northwestern Polytechnical University reported computer break-ins in June.
It said the center, working with a commercial security provider, Qihoo 360 Technology Co., traced the attacks to United States’ National Security Agency (NSA) but didn’t say how that was done.
China and the United States are, along with Russia, regarded as global leaders in cyber-warfare research.
China accuses the United States of spying on universities, energy and internet companies and other targets. Washington accuses Beijing of stealing commercial secrets and has announced criminal charges against Chinese military officers.
The technology journal Wired says China’s allegations often refer to out-of-date ‘crimes’: “Ben Read, director of cyberespionage analysis at the US cybersecurity firm Mandiant, says China’s state media push of alleged US hacking seems to be consistent, but it mostly contains older information,” a May 2022 article informs.
Chinese state media Global Times has written an expose about the recent incident involving "malicious attacks against targets in China".
The US actions “seriously endanger China’s national security,” said Foreign Ministry spokesperson Mao Ning. She also accused Washington of eavesdropping on Chinese mobile phones and stealing text messages.
“China strongly condemns it,” Mao said. “The United States should immediately stop using its advantages to steal secrets and attack other countries.”
The American Embassy in Beijing didn’t immediately respond to a request for comment, the Associated Press reported. Bloomberg reported that it too had contacted the embassy, as well as the NSA, without any immediate success.
Security experts say the ruling Communist Party’s military wing, the People’s Liberation Army (PLA), and the Ministry of State Security also sponsor hackers outside the government.
Northwestern Polytechnical University, in the western city of Xi’an, is on a US government “entity list” that limits its access to American technology. Washington says the university helps the PLA develop aerial and underwater drones and missile technology.
Monday’s announcement accused the United States of taking information about the university’s network management and other “core technologies.” It said Chinese analysts found 41 “network attack” tools that it said were traced to the NSA.
Last year, a Chinese man, Shuren Qin, was sentenced to two years in prison by a federal court in Boston after he pleaded guilty to exporting underwater and marine technology to Northwestern Polytechnical University without required licenses.
The NSA, part of the Department of Defense, is responsible for “signals intelligence,” or obtaining communications and other data.
The Computer Virus Emergency Response Center, set up in 1996 by the police department of the eastern city of Tianjin, describes itself as the Chinese agency responsible for inspection and testing of anti-computer virus products.
A report by Qihoo 360 in 2020 said hacking tools used in attacks on Chinese companies and government agencies in 2008-19 were traced to the Central Intelligence Agency by comparing them with code in CIA tools disclosed by the Wikileaks group.
The virus center accused the NSA of carrying out other “malicious network attacks” in China but gave no details. It said 13 people involved in the attacks had been identified.
The hackers targeted a “zero day,” or previously unreported, vulnerability in the school’s security, the statement said. It said the break-ins were conducted from servers in 17 countries including Japan, South Korea, Sweden, Poland, Ukraine and Colombia.
The statement described what it said were NSA software tools with names such as “Second Date” and “Drinking Tea” but didn’t say which might have been used at the university.
Source: agencies
