A cyberespionage campaign blamed on China was more sweeping than previously known, with suspected state-backed hackers exploiting a device meant to boost Internet security to penetrate the computers of critical US entities.
The hack of Pulse Connect Secure networking devices came to light in April, but its scope is only now starting to become clear.
The hackers targeted telecommunications giant Verizon and the Metropolitan Water District of Southern California, the US’ largest water agency.
News broke earlier this month that the New York City subway system, the country’s largest, was also breached.
Security researchers said that dozens of other high-value entities that have not yet been named were also targeted as part of the breach of Pulse Secure, which is used by many companies and governments for secure remote access to their networks.
It is unclear what sensitive information, if any, was accessed.
Some of the targets said that they did not see any evidence of data being stolen.
That uncertainty is common in cyberespionage and it can take months to determine data loss, if it is ever discovered.
However, even if sensitive information was not compromised, experts say that it is worrisome that hackers managed to gain footholds in networks of critical organizations whose secrets could be of interest to China for commercial and national security reasons.
“The threat actors were able to get access to some really high-profile organizations, some really well-protected ones,” said Charles Carmakal, head technology officer of Mandiant, whose company first publicized the hacking campaign in April.
China has a long history of using the Internet to spy on the US and presents a “prolific and effective cyberespionage threat,” the US Office of the Director of the National Intelligence said in its most recent annual threat assessment.
The Chinese government has denied any role in the Pulse hacking campaign and the US government has not made any formal attribution.
In the Pulse campaign, security experts said sophisticated hackers exploited never-before-seen vulnerabilities to break in and were hyper diligent in trying to cover their tracks once inside.
“The capability is very strong and difficult to defend against, and the profile of victims is very significant,” BAE Systems Applied Intelligence head of cyber Adrian Nish said. “This is a very targeted attack against a few dozen networks that all have national significance in one way or another.”
The US Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency issued an April alert about the Pulse hack saying that it was aware of “compromises affecting a number of US government agencies, critical infrastructure entities and other private sector organizations.”
The new details of the Pulse Secure hack come at a time of tension between the US and China.
US President Joe Biden has made checking China’s growth a top priority, and said the country’s ambition of becoming the wealthiest and most powerful country in the world is “not going to happen under my watch.”
A fire caused by a burst gas pipe yesterday spread to several homes and sent a fireball soaring into the sky outside Malaysia’s largest city, injuring more than 100 people. The towering inferno near a gas station in Putra Heights outside Kuala Lumpur was visible for kilometers and lasted for several hours. It happened during a public holiday as Muslims, who are the majority in Malaysia, celebrate the second day of Eid al-Fitr. National oil company Petronas said the fire started at one of its gas pipelines at 8:10am and the affected pipeline was later isolated. Disaster management officials said shutting the
DITCH TACTICS: Kenyan officers were on their way to rescue Haitian police stuck in a ditch suspected to have been deliberately dug by Haitian gang members A Kenyan policeman deployed in Haiti has gone missing after violent gangs attacked a group of officers on a rescue mission, a UN-backed multinational security mission said in a statement yesterday. The Kenyan officers on Tuesday were on their way to rescue Haitian police stuck in a ditch “suspected to have been deliberately dug by gangs,” the statement said, adding that “specialized teams have been deployed” to search for the missing officer. Local media outlets in Haiti reported that the officer had been killed and videos of a lifeless man clothed in Kenyan uniform were shared on social media. Gang violence has left
US Vice President J.D. Vance on Friday accused Denmark of not having done enough to protect Greenland, when he visited the strategically placed and resource-rich Danish territory coveted by US President Donald Trump. Vance made his comment during a trip to the Pituffik Space Base in northwestern Greenland, a visit viewed by Copenhagen and Nuuk as a provocation. “Our message to Denmark is very simple: You have not done a good job by the people of Greenland,” Vance told a news conference. “You have under-invested in the people of Greenland, and you have under-invested in the security architecture of this
Japan unveiled a plan on Thursday to evacuate around 120,000 residents and tourists from its southern islets near Taiwan within six days in the event of an “emergency”. The plan was put together as “the security situation surrounding our nation grows severe” and with an “emergency” in mind, the government’s crisis management office said. Exactly what that emergency might be was left unspecified in the plan but it envisages the evacuation of around 120,000 people in five Japanese islets close to Taiwan. China claims Taiwan as part of its territory and has stepped up military pressure in recent years, including
RSS