Unknown hackers have broken into the security networks of Lockheed Martin Corp and several other US military contractors, a source with direct knowledge of the attacks said.
They breached security systems designed to keep out intruders by creating duplicates to “SecurID” electronic keys from EMC Corp’s RSA security division, said the person who was not authorized to publicly discuss the matter.
It was not immediately clear what kind of data, if any, was stolen by the hackers. However, the networks of Lockheed and other military contractors contain sensitive data on future weapons systems, as well as military technology currently used in Iraq and Afghanistan.
Weapons makers are the latest companies to be breached through sophisticated attacks that have pierced the defenses of huge corporations including Sony Corp, Google Inc and EMC Corp. Security experts say that it is virtually impossible for any company or government agency to build a security network that hackers will be unable to penetrate.
The Pentagon, which has about 85,000 military personnel and civilians working on cybersecurity issues worldwide, said it also uses a limited number of RSA electronic security keys, but declined to say how many for security reasons.
The hackers learned how to copy the security keys with data stolen from RSA during a sophisticated attack that EMC disclosed in March, according to the source.
EMC declined to comment on the matter, as did executives at major defense contractors.
Rick Moy, president of NSS Labs, an information security company, said the original attack on RSA was likely targeted at its customers, including military, financial, US governmental and other organizations with critical intellectual property.
He said the initial RSA attack was followed by malware and phishing campaigns seeking specific data that would link tokens to endusers, which meant the current attacks may have been carried out by the same hackers.
“Given the military targets and that millions of compromised keys are in circulation, this is not over,” he said.
Defense contractors’ networks contain sensitive data on sophisticated weapons systems, but all classified information is kept on separate, closed networks managed by the US government, said a former senior defense official, who was not authorized to speak on the record.
SecurIDs are widely used electronic keys to computer systems that work using a two-pronged approach to confirming the identity of the person trying to access a computer system. They are designed to thwart hackers who might use key-logging viruses to capture passwords by constantly generating new passwords to enter the system.
The SecurID generates new strings of digits on a minute-by-minute basis that the user must enter along with a secret personal identification number before they can access the network. If the user fails to enter the string before it expires, then access is denied.
STILL COMMITTED: The US opposes any forced change to the ‘status quo’ in the Strait, but also does not seek conflict, US Secretary of State Marco Rubio said US President Donald Trump’s administration released US$5.3 billion in previously frozen foreign aid, including US$870 million in security exemptions for programs in Taiwan, a list of exemptions reviewed by Reuters showed. Trump ordered a 90-day pause on foreign aid shortly after taking office on Jan. 20, halting funding for everything from programs that fight starvation and deadly diseases to providing shelters for millions of displaced people across the globe. US Secretary of State Marco Rubio, who has said that all foreign assistance must align with Trump’s “America First” priorities, issued waivers late last month on military aid to Israel and Egypt, the
France’s nuclear-powered aircraft carrier and accompanying warships were in the Philippines yesterday after holding combat drills with Philippine forces in the disputed South China Sea in a show of firepower that would likely antagonize China. The Charles de Gaulle on Friday docked at Subic Bay, a former US naval base northwest of Manila, for a break after more than two months of deployment in the Indo-Pacific region. The French carrier engaged with security allies for contingency readiness and to promote regional security, including with Philippine forces, navy ships and fighter jets. They held anti-submarine warfare drills and aerial combat training on Friday in
COMBAT READINESS: The military is reviewing weaponry, personnel resources, and mobilization and recovery forces to adjust defense strategies, the defense minister said The military has released a photograph of Minister of National Defense Wellington Koo (顧立雄) appearing to sit beside a US general during the annual Han Kuang military exercises on Friday last week in a historic first. In the photo, Koo, who was presiding over the drills with high-level officers, appears to be sitting next to US Marine Corps Major General Jay Bargeron, the director of strategic planning and policy of the US Indo-Pacific Command, although only Bargeron’s name tag is visible in the seat as “J5 Maj General.” It is the first time the military has released a photo of an active
CHANGE OF MIND: The Chinese crew at first showed a willingness to cooperate, but later regretted that when the ship arrived at the port and refused to enter Togolese Republic-registered Chinese freighter Hong Tai (宏泰號) and its crew have been detained on suspicion of deliberately damaging a submarine cable connecting Taiwan proper and Penghu County, the Coast Guard Administration said in a statement yesterday. The case would be subject to a “national security-level investigation” by the Tainan District Prosecutors’ Office, it added. The administration said that it had been monitoring the ship since 7:10pm on Saturday when it appeared to be loitering in waters about 6 nautical miles (11km) northwest of Tainan’s Chiang Chun Fishing Port, adding that the ship’s location was about 0.5 nautical miles north of the No.