Microsoft said on Thursday that a security vulnerability in its Internet Explorer browser was used in cyberattacks that prompted Google to threaten to shut down its operations in China.
Meanwhile, Web security firm MaAfee Inc said the attacks on Google and other companies showed a level of sophistication beyond that of cyber criminals and more typical of a nation-state.
Revealing the attacks on Tuesday, Google said they originated from China and targeted the e-mail accounts of Chinese human rights activists around the world, but did not explicitly accuse the Chinese government of responsibility.
Dmitri Alperovitch, vice president of threat research for McAfee, said that while McAfee had “no proof that the Chinese are behind this particular attack, I think there are indications though that a nation-state is behind it.”
Google said more than 20 other unidentified firms were targeted in the “highly sophisticated” attacks. while other reports have put the number of companies attacked at more than 30.
Google said that following the attacks it had decided to no longer censor its Internet search engine in China and was prepared to close its operations there entirely if it could not reach an agreement with the Chinese authorities.
Only one other company, Adobe, has come forward so far and acknowledged that it was a target of the attacks, which exploited a previously unknown security flaw in Internet Explorer.
“Internet Explorer was one of the vectors used in targeted and sophisticated attacks targeted against Google and other corporate networks,” Mike Reavey, the director of Microsoft’s Security Response Center, said in a blog post on Thursday.
Reavey stressed that Microsoft “has not seen widespread customer impact, rather only targeted and limited attacks exploiting [Internet Explorer 6.]”
Changing security settings to “high” would protect users from the vulnerability, he said.
Microsoft chief executive Steve Ballmer said meanwhile that the US software giant takes cyberattacks “seriously” but has no plans to pull out of China.
“We’ve been quite clear that we’re going to operate in China,” Ballmer told CNBC television. “We’re going to abide by the law.”
“We need to take all cyberattacks seriously, not just this one,” he said.
Alperovitch said the attacks on Google and other companies, which he was not allowed to identify, were unusual in their sophistication.
“We have seen attacks like this before but only in the government space, in the defense-industrial space,” Alperovitch said. “We have never seen that level of sophistication, level of planning and reconnaissance and attention to detail in attacks on commercial entities. Primarily the threat to commercial entities is from cyber-crime individuals after financial data. They’re typically sloppy.”
“This exploit was highly sophisticated,” he said. “It used multiple levels of obfuscation and encryption, more so than in any other types of exploits that we have seen previously.”
Such sophistication is “typically an attribute of a nation-state type of attack — and that’s exactly what we see here,” the McAfee researcher said.
Alperovitch said that the attackers used e-mail or some other lure to get employees of a targeted company to click on a link and visit a specially crafted Web site using Internet Explorer.
“Malware would then be downloaded that has the capability to essentially install a ‘back door’ in the machine,” he said. “This allows the attacker to log into the machine and essentially take it over as if they were sitting at the keyboard manipulating that machine.”
“What that does is it gives the attacker a beachhead into the organization from which point they can start exploring, identifying valuable pieces of data and other vulnerable services,” he said.
‘TAIWAN-FRIENDLY’: The last time the Web site fact sheet removed the lines on the US not supporting Taiwanese independence was during the Biden administration in 2022 The US Department of State has removed a statement on its Web site that it does not support Taiwanese independence, among changes that the Taiwanese government praised yesterday as supporting Taiwan. The Taiwan-US relations fact sheet, produced by the department’s Bureau of East Asian and Pacific Affairs, previously stated that the US opposes “any unilateral changes to the status quo from either side; we do not support Taiwan independence; and we expect cross-strait differences to be resolved by peaceful means.” In the updated version published on Thursday, the line stating that the US does not support Taiwanese independence had been removed. The updated
‘CORRECT IDENTIFICATION’: Beginning in May, Taiwanese married to Japanese can register their home country as Taiwan in their spouse’s family record, ‘Nikkei Asia’ said The government yesterday thanked Japan for revising rules that would allow Taiwanese nationals married to Japanese citizens to list their home country as “Taiwan” in the official family record database. At present, Taiwanese have to select “China.” Minister of Foreign Affairs Lin Chia-lung (林佳龍) said the new rule, set to be implemented in May, would now “correctly” identify Taiwanese in Japan and help protect their rights, the Ministry of Foreign Affairs said in a statement. The statement was released after Nikkei Asia reported the new policy earlier yesterday. The name and nationality of a non-Japanese person marrying a Japanese national is added to the
AT RISK: The council reiterated that people should seriously consider the necessity of visiting China, after Beijing passed 22 guidelines to punish ‘die-hard’ separatists The Mainland Affairs Council (MAC) has since Jan. 1 last year received 65 petitions regarding Taiwanese who were interrogated or detained in China, MAC Minister Chiu Chui-cheng (邱垂正) said yesterday. Fifty-two either went missing or had their personal freedoms restricted, with some put in criminal detention, while 13 were interrogated and temporarily detained, he said in a radio interview. On June 21 last year, China announced 22 guidelines to punish “die-hard Taiwanese independence separatists,” allowing Chinese courts to try people in absentia. The guidelines are uncivilized and inhumane, allowing Beijing to seize assets and issue the death penalty, with no regard for potential
‘UNITED FRONT’ FRONTS: Barring contact with Huaqiao and Jinan universities is needed to stop China targeting Taiwanese students, the education minister said Taiwan has blacklisted two Chinese universities from conducting academic exchange programs in the nation after reports that the institutes are arms of Beijing’s United Front Work Department, Minister of Education Cheng Ying-yao (鄭英耀) said in an exclusive interview with the Chinese-language Liberty Times (the Taipei Times’ sister paper) published yesterday. China’s Huaqiao University in Xiamen and Quanzhou, as well as Jinan University in Guangzhou, which have 600 and 1,500 Taiwanese on their rolls respectively, are under direct control of the Chinese government’s political warfare branch, Cheng said, citing reports by national security officials. A comprehensive ban on Taiwanese institutions collaborating or
RSS