A series of online attacks on Google and dozens of other US corporations have been traced to computers at two educational institutions in China, including one with close ties to the Chinese military, people involved in the investigation said.
They also said the attacks, aimed at stealing trade secrets and computer codes and capturing the e-mails of Chinese human rights activists, may have begun as early as April, months earlier than previously believed. Google announced on Jan. 12 that it and other companies had been subjected to sophisticated attacks that probably came from China.
Computer security experts, including investigators from the National Security Agency, have been working since then to pinpoint the source of the attacks. Until recently, the trail had led only to servers in Taiwan.
If supported by further investigation, the findings raise as many questions as they answer, including the possibility that some of the attacks came from China but not necessarily from the Chinese government, or even from Chinese sources.
Tracing the attacks further back, to an elite Chinese university and a vocational school, is a breakthrough in a difficult task. Evidence acquired by a US military contractor that faced the same attacks as Google has even led investigators to suspect a link to a specific computer science class, taught by a Ukrainian professor at the vocational school.
The revelations were shared by the contractor at a meeting of computer security specialists.
The Chinese schools involved are Shanghai Jiaotong University and the Lanxiang Vocational School, according to several people with knowledge of the investigation who asked for anonymity because they were not authorized to discuss the inquiry.
Jiaotong has one of China’s top computer science programs. Lanxiang, in Shandong province, is a huge vocational school that was established with military support and trains some computer scientists for the military. The school’s computer network is operated by a company with close ties to Baidu, the dominant search engine in China and a competitor of Google.
Analysts differ on how to interpret the finding that the intrusions appear to come from schools instead of Chinese military installations or government agencies. Some analysts have privately circulated a document asserting that the vocational school is being used as camouflage for government operations, but other computer industry executives and former government officials said the schools may be cover for a “false flag” intelligence operation being run by a third country. Some have also speculated that the hacking could be a giant example of criminal industrial espionage, aimed at stealing intellectual property from US technology firms.
Spokesmen for the Chinese schools said they had not heard that US investigators had traced the Google attacks to their campuses.
When asked about the possibility, a leading professor in Jiaotong’s School of Information Security Engineering said in a telephone interview: “I’m not surprised. Actually students hacking into foreign Web sites is quite normal.”
The professor, who teaches Web security, asked not to be named for fear of reprisal.
“I believe there’s two kinds of situations. One is it’s a completely individual act of wrongdoing, done by one or two geek students in the school who are just keen on experimenting with their hacking skills learned from the school, since the sources in the school and network are so limited. Or it could be that one of the university’s IP addresses was hijacked by others, which frequently happens.”
At Lanxiang Vocational, officials said they had not heard about any possible link to the school and declined to say if a Ukrainian professor taught computer science there.
A man surnamed Shao, who said he was dean of the computer science department at Lanxiang but refused to give his first name, said: “I think it’s impossible for our students to hack Google or other US companies because they are just high school graduates and not at an advanced level. Also, because our school adopts close management, outsiders cannot easily come into our school.”
Shao acknowledged that every year four or five students from his computer science department were recruited into the military.
QUIET START: Nearly a week after applications opened, agencies did not announce or promote the program, nor did they explain how it differed from other visitor visas Taiwan has launched a six-month “digital nomad visitor visa” program for foreign nationals from its list of visa-exempt countries who meet financial eligibility criteria and provide proof of work contracts. To apply, foreign nationals must either provide proof that they have obtained a digital nomad visa issued by another country or demonstrate earnings based on age brackets, the Bureau of Consular Affairs said. Applicants aged 20 to 29 must show they earned an annual salary of at least US$20,000 or its equivalent in one of the past two years, while those aged 30 or older must provide proof they earned US$40,000 in
SERIOUS ALLEGATIONS: The suspects formed spy networks and paramilitary groups to kill government officials during a possible Chinese invasion, prosecutors said Prosecutors have indicted seven retired military officers, members of the Rehabilitation Alliance Party, for allegedly obtaining funds from China, and forming paramilitary groups and assassination squads in Taiwan to collaborate with Chinese troops in a possible war. The suspects contravened the National Security Act (國家安全法) by taking photos and drawing maps of key radar stations, missile installations and the American Institute in Taiwan’s headquarters in Taipei, prosecutors said. They allegedly prepared to collaborate with China during a possible invasion of Taiwan, prosecutors said. Retired military officer Chu Hung-i (屈宏義), 62, a Republic of China Army Academy graduate, went to China
AIR DEFENSE: The Norwegian missile system has proved highly effective in Ukraine in its war against Russia, and the US has recommended it for Taiwan, an expert said The Norwegian Advanced Surface-to-Air Missile Systems (NASAMS) Taiwan ordered from the US would be installed in strategically important positions in Taipei and New Taipei City to guard the region, the Ministry of National Defense said in statement yesterday. The air defense system would be deployed in Taipei’s Songshan District (松山) and New Taipei City’s Tamsui District (淡水), the ministry said, adding that the systems could be delivered as soon as the end of this year. The US Defense Security Cooperation Agency has previously said that three NASAMS would be sold to Taiwan. The weapons are part of the 17th US arms sale to
UNITY MESSAGE: Rather than focusing on what Trump said on the campaign trail about Taiwan, Taipei should be willing to engage with the US, Pompeo said Taiwan plays a key role in Washington’s model of deterrence against China, former US secretary of state Mike Pompeo said in a speech in Taipei yesterday. During US president-elect Donald Trump’s first term, “we had developed what we believe was a pretty effective model of deterrence against adversaries who wanted to undermine the set of rules and values that the people of Taiwan and the people of the US hold dear,” Pompeo said at a forum organized by the Formosa Republican Association. “Succeeding in continuing to build this model will not solely rest at the feet of president Trump and his team,