For the past four months, Chinese hackers have persistently attacked the New York Times, infiltrating its computer systems and getting passwords for its reporters and other employees.
After surreptitiously tracking the intruders to study their movements and help erect better defenses to block them, the Times and computer security experts have expelled the attackers and kept them from breaking back in.
The timing of the attacks coincided with the report of a Times investigation, published online on Oct. 25, that found that the relatives of Chinese Premier Wen Jiabao (溫家寶) had accumulated a fortune worth several billion of US dollars through business dealings.
Security experts hired by the Times to detect and block the computer attacks gathered digital evidence that Chinese hackers, using methods that some consultants have associated with the Chinese military in the past, breached the Times’ network.
They broke into the e-mail accounts of its Shanghai bureau chief, David Barboza, who wrote the reports on Wen’s relatives, and Jim Yardley, the Times’ South Asia bureau chief in India, who previously worked as bureau chief in Beijing.
“Computer security experts found no evidence that sensitive e-mails or files from the reporting of our articles about the Wen family were accessed, downloaded or copied,” Times executive editor Jill Abramson said.
The hackers tried to cloak the source of the attacks on the Times by first penetrating computers at US universities and routing the attacks through them, said computer security experts at Mandiant, the company hired by the Times. This matches the subterfuge used in many other attacks that Mandiant has tracked to China.
The attackers first installed malicious software, or malware, that enabled them to gain entry to any computer on the Times’ network. The malware was identified by computer security experts as a specific strain associated with computer attacks originating in China. More evidence of the source, experts said, is that the attacks started from the same university computers used by the Chinese military to attack US military contractors in the past.
Security experts found evidence that the hackers stole the corporate passwords of every Times employee and used those to gain access to the computers of 53 employees, most of them outside the Times’ newsroom.
Experts found no evidence that the intruders used the passwords to seek information that was not related to the reporting on the Wen family.
No customer data was stolen from the Times, they said.
Asked about evidence that indicated the hacking originated in China, China’s Ministry of National Defense on Wednesday said that “to accuse the Chinese military of launching cyberattacks without solid proof is unprofessional and baseless.”
In Beijing, Chinese Ministry of Foreign Affairs spokesman Hong Lei (洪磊) told reporters: “The competent Chinese authorities have already issued a clear response to the groundless accusations made by the New York Times.”
Asked about cyberspying and hacking accusations made against China in general, he said: “To arbitrarily assert and to conclude without hard evidence that China participated in such hacking attacks is totally irresponsible.”
“China is also a victim of hacking attacks. Chinese laws clearly forbid hacking attacks, and we hope relevant parties takes a responsible attitude on this issue,” he said.
Additional reporting by AFP
Super Typhoon Kong-rey is the largest cyclone to impact Taiwan in 27 years, the Central Weather Administration (CWA) said today. Kong-rey’s radius of maximum wind (RMW) — the distance between the center of a cyclone and its band of strongest winds — has expanded to 320km, CWA forecaster Chang Chun-yao (張竣堯) said. The last time a typhoon of comparable strength with an RMW larger than 300km made landfall in Taiwan was Typhoon Herb in 1996, he said. Herb made landfall between Keelung and Suao (蘇澳) in Yilan County with an RMW of 350km, Chang said. The weather station in Alishan (阿里山) recorded 1.09m of
NO WORK, CLASS: President William Lai urged people in the eastern, southern and northern parts of the country to be on alert, with Typhoon Kong-rey approaching Typhoon Kong-rey is expected to make landfall on Taiwan’s east coast today, with work and classes canceled nationwide. Packing gusts of nearly 300kph, the storm yesterday intensified into a typhoon and was expected to gain even more strength before hitting Taitung County, the US Navy’s Joint Typhoon Warning Center said. The storm is forecast to cross Taiwan’s south, enter the Taiwan Strait and head toward China, the Central Weather Administration (CWA) said. The CWA labeled the storm a “strong typhoon,” the most powerful on its scale. Up to 1.2m of rainfall was expected in mountainous areas of eastern Taiwan and destructive winds are likely
The Central Weather Administration (CWA) yesterday at 5:30pm issued a sea warning for Typhoon Kong-rey as the storm drew closer to the east coast. As of 8pm yesterday, the storm was 670km southeast of Oluanpi (鵝鑾鼻) and traveling northwest at 12kph to 16kph. It was packing maximum sustained winds of 162kph and gusts of up to 198kph, the CWA said. A land warning might be issued this morning for the storm, which is expected to have the strongest impact on Taiwan from tonight to early Friday morning, the agency said. Orchid Island (Lanyu, 蘭嶼) and Green Island (綠島) canceled classes and work
KONG-REY: A woman was killed in a vehicle hit by a tree, while 205 people were injured as the storm moved across the nation and entered the Taiwan Strait Typhoon Kong-rey slammed into Taiwan yesterday as one of the biggest storms to hit the nation in decades, whipping up 10m waves, triggering floods and claiming at least one life. Kong-rey made landfall in Taitung County’s Chenggong Township (成功) at 1:40pm, the Central Weather Administration (CWA) said. The typhoon — the first in Taiwan’s history to make landfall after mid-October — was moving north-northwest at 21kph when it hit land, CWA data showed. The fast-moving storm was packing maximum sustained winds of 184kph, with gusts of up to 227kph, CWA data showed. It was the same strength as Typhoon Gaemi, which was the most
RSS