Microsoft said on Thursday that a security vulnerability in its Internet Explorer browser was used in cyberattacks that prompted Google to threaten to shut down its operations in China.
Meanwhile, Web security firm MaAfee Inc said the attacks on Google and other companies showed a level of sophistication beyond that of cyber criminals and more typical of a nation-state.
Revealing the attacks on Tuesday, Google said they originated from China and targeted the e-mail accounts of Chinese human rights activists around the world, but did not explicitly accuse the Chinese government of responsibility.
Dmitri Alperovitch, vice president of threat research for McAfee, said that while McAfee had “no proof that the Chinese are behind this particular attack, I think there are indications though that a nation-state is behind it.”
Google said more than 20 other unidentified firms were targeted in the “highly sophisticated” attacks. while other reports have put the number of companies attacked at more than 30.
Google said that following the attacks it had decided to no longer censor its Internet search engine in China and was prepared to close its operations there entirely if it could not reach an agreement with the Chinese authorities.
Only one other company, Adobe, has come forward so far and acknowledged that it was a target of the attacks, which exploited a previously unknown security flaw in Internet Explorer.
“Internet Explorer was one of the vectors used in targeted and sophisticated attacks targeted against Google and other corporate networks,” Mike Reavey, the director of Microsoft’s Security Response Center, said in a blog post on Thursday.
Reavey stressed that Microsoft “has not seen widespread customer impact, rather only targeted and limited attacks exploiting [Internet Explorer 6.]”
Changing security settings to “high” would protect users from the vulnerability, he said.
Microsoft chief executive Steve Ballmer said meanwhile that the US software giant takes cyberattacks “seriously” but has no plans to pull out of China.
“We’ve been quite clear that we’re going to operate in China,” Ballmer told CNBC television. “We’re going to abide by the law.”
“We need to take all cyberattacks seriously, not just this one,” he said.
Alperovitch said the attacks on Google and other companies, which he was not allowed to identify, were unusual in their sophistication.
“We have seen attacks like this before but only in the government space, in the defense-industrial space,” Alperovitch said. “We have never seen that level of sophistication, level of planning and reconnaissance and attention to detail in attacks on commercial entities. Primarily the threat to commercial entities is from cyber-crime individuals after financial data. They’re typically sloppy.”
“This exploit was highly sophisticated,” he said. “It used multiple levels of obfuscation and encryption, more so than in any other types of exploits that we have seen previously.”
Such sophistication is “typically an attribute of a nation-state type of attack — and that’s exactly what we see here,” the McAfee researcher said.
Alperovitch said that the attackers used e-mail or some other lure to get employees of a targeted company to click on a link and visit a specially crafted Web site using Internet Explorer.
“Malware would then be downloaded that has the capability to essentially install a ‘back door’ in the machine,” he said. “This allows the attacker to log into the machine and essentially take it over as if they were sitting at the keyboard manipulating that machine.”
“What that does is it gives the attacker a beachhead into the organization from which point they can start exploring, identifying valuable pieces of data and other vulnerable services,” he said.
DEATH THREAT: A MAC official said that it has urged Beijing to avoid creating barriers that would impede exchanges across the Strait, but it continues to do so People should avoid unnecessary travel to China after Beijing issued 22 guidelines allowing its courts to try in absentia and sentence to death “Taiwan independence separatists,” the Mainland Affairs Council (MAC) said yesterday as it raised its travel alert for China, including Hong Kong and Macau, to “orange.” The guidelines published last week “severely threaten the personal safety of Taiwanese traveling to China, Hong Kong and Macau,” MAC Deputy Minister and spokesman Liang Wen-chieh (梁文傑) told a news conference in Taipei. “Following a comprehensive assessment, the government considers it necessary to elevate the travel alert to orange from yellow,” Liang said. Beijing has
Chinese President Xi Jinping (習近平) yesterday said that the Chinese Communist Party was planning and implementing “major” reforms, ahead of a political conclave that is expected to put economic recovery high on the agenda. Chinese policymakers have struggled to reignite growth since late 2022, when restrictions put in place due to the COVID-19 pandemic were lifted. The world’s second-largest economy is beset by a debt crisis in the property sector, persistently low consumption and high unemployment among young people. Policymakers “are planning and implementing major measures to further deepen reform in a comprehensive manner,” Xi said in a speech at the Great Hall
CIVIL DEFENSE: More reservists in alternative service would help establish a sound civil defense system for use in wartime and during natural disasters, Kuma Academy’s CEO said While a total of 120,000 reservists are expected to be called up for alternative reserve drills this year, compared with the 6,505 drilled last year, the number has been revised to 58,000 due to a postponed training date, Deputy Minster of the Interior Ma Shih-yuan (馬士元) said. In principle, the ministry still aims to call up 120,000 reservists for alternative reserve drills next year, he said, but the actual number would not be decided later until after this year’s evaluation. The increase follows a Legislative Yuan request that the Ministry of the Interior address low recruitment rates, which it made while reviewing
DETERRENCE: Along with US$500 million in military aid and up to US$2 billion in loans and loan guarantees, the bill would allocate US$400 million to countering PRC influence The US House of Representatives on Friday approved an appropriations bill for fiscal year 2025 that includes US$500 million in military aid for Taiwan. The legislation, which authorizes funding for the US Department of State, US foreign operations and related programs for next year, passed 212-200 in the Republican-led House. The bill stipulates that the US would provide no less than US$500 million in foreign military financing for Taiwan to enhance deterrence across the Taiwan Strait, and offer Taipei up to US$2 billion in loans and loan guarantees for the same purpose. The funding would be made available under the US’ Foreign Military