Subscribe free to our newsletters via your
. 24/7 Space News .




CYBER WARS
FireEye report: Chinese hackers target foreign ministries
by Staff Writers
Beijing (UPI) Dec 13, 2013


disclaimer: image is for illustration purposes only

Cybersecurity company FireEye claims Chinese hackers broke into the computer systems of five European foreign ministries over the summer.

The hackers sent emails with malware attachments purporting to detail a possible U.S. intervention in Syria, the BBC reported.

Nine computers were compromised, the company told the BBC.

The company hasn't revealed which ministries were targeted but said the malware was meant for individuals involved in last summer's Group of 20 talks in St. Petersburg attended by senior government leaders.

A main topic of discussion among the leaders was the Syrian crisis.

FireEye's 23-page report, available on its website, calls the cyber espionage campaign "Ke3chang" where hackers sent out emails that advertised information updates about the Syrian crisis.

"We believe that the Ke3chang attackers are operating out of China and have been active since at least 2010," the report said.

"However, we believe specific Syria-themed attacks against foreign affairs ministries -- codenamed by Ke3chang as 'moviestar' -- began only in August 2013. The timing of the attacks precedes a G20 meeting held in Russia that focused on the crisis in Syria."

FireEye researchers said they were able to monitor one of the Hackers' computer servers for one week.

"When they [the hackers] shift infrastructure, the servers are open. I just happened to check the servers when they weren't secured," senior FireEye researcher Narottama Villeneuve told the BBC.

The report says FireEye "gained visibility into one of 23 known command-and-control servers operated by the Ke3chang actor for about a week. During this time, we discovered 21 compromised machines connecting to the CnC server."

Researchers observed what "appeared to be three administrative tests by the attackers and two connections from other malware researchers."

Among the targets, FireEye said it identified nine compromises at government ministries in five European countries. Eight of these compromises were at ministries of foreign affairs.

"When FireEye had visibility on the CnC server, we saw the attackers engage in post-compromise information-gathering and lateral movement on the target network whereupon FireEye immediately contacted the relevant authorities and began the notification process.

"At that stage, it appeared to be about network reconnaissance," Villeneuve told the BBC. "The hackers were based in China, but it is difficult to determine from a technology point of view how or if it is connected to a nation state," Villeneuve said.

During the week the malware was observed in action, no documents were stolen.

The report by FireEye, based in Milpitas, Calif., comes amid growing Western concern over fears of increasing attacks by Chinese hackers -- some allegedly with government approval or direction.

The Australian government said in May it won't dump its nearly completed spy agency headquarters in Canberra and start building over again, despite allegations Chinese Internet hackers stole the building's blueprints.

Australian Broadcasting Corp.'s investigative program "Four Corners" reported Chinese hackers managed to get into files of top secret detailed blueprints.

The plans reportedly showed details of complex electrical and electronic cabling, security and communications systems as well as floor plans for the headquarters of the Australian Security Intelligence Organization, the Australian reported.

U.S. Defense Secretary Chuck Hagel, on his first trip after taking up the post, publicly rebuked China in June for its alleged cyberespionage operations.

The Voice of America reported Hagel called for China to work with the United States to establish a cyberspace code of conduct.

"The United States has expressed our concerns about the growing threat of cyberintrusions, some of which appear to be tied to the Chinese government and military," Hagel said in a speech to officials of several Asia-Pacific nations gathered for an annual security summit at Singapore's Shangri-La Hotel.

Setting up a joint cyber working group would be "a positive step in fostering U.S.-China dialogue on cyber," he said.

"We are determined to work more vigorously with China and other partners to establish international norms of responsible behavior in cyberspace."

The Chinese government continues to deny any connection to alleged cyberattacks.

.


Related Links
Cyberwar - Internet Security News - Systems and Policy Issues






Comment on this article via your Facebook, Yahoo, AOL, Hotmail login.

Share this article via these popular social media networks
del.icio.usdel.icio.us DiggDigg RedditReddit GoogleGoogle








CYBER WARS
Raytheon BBN Technologies and GrammaTech collaborate to help U.S. government prevent malware in IT devices
Boston MA (SPX) Dec 17, 2013
Raytheon BBN Technologies and GrammaTech, Inc. are collaborating on a $4.8 million contract award under the Defense Advanced Research Projects Agency's VET program. Raytheon BBN Technologies is a wholly owned subsidiary of Raytheon. The VET (Vetting Commodity IT Software and Firmware) program seeks to help U.S. government agencies address the threat of malicious code and hidden "backdoor" ... read more


CYBER WARS
Ancient crater could hold clues about moon's mantle

Minerals in giant impact crater may be clues to moon's makeup, origin

Silent Orbit for China's Moon Lander

China's most moon-like place

CYBER WARS
The Tough Task of Finding Fossils While Wearing a Spacesuit

Mars One Selects Lockheed Martin to Study First Private Unmanned Mission to Mars

SSTL selected for first private Mars mission

NASA Curiosity: First Mars Age Measurement and Human Exploration Help

CYBER WARS
Quails in orbit: French cuisine aims for the stars

Heat Shield for NASA's Orion Spacecraft Arrives at Kennedy Space Center

Space exploration can drive the next agricultural revolution

Global patent growth hits 18-year high

CYBER WARS
Chang'e-3 probe moves closer to the moon

China's first lunar rover lands on moon: State TV

China moon rover enters lunar orbit: Xinhua

Turkey keen on space cooperation with China

CYBER WARS
NASA reports coolant loop problem at ISS

Space station cooling breakdown may delay Orbital launch

New crew to run space station in March

Russian android may take on outer space operations at ISS

CYBER WARS
Russian Official Plays Down Concerns on Future of Proton

The ABS-2 and Athena-Fidus satellites for launch by Ariane 5 are welcomed in French Guiana

Arianespace to launch Brazilian government satellite SGDC

Kazakhstan to end Proton missions in 2025

CYBER WARS
Feature of Earth's atmosphere may help in search for habitable planets

Astronomers discover planet that shouldn't be there

Hot Jupiters Highlight Challenges in the Search for Life Beyond Earth

Astronomers find strange planet orbiting where there shouldn't be one

CYBER WARS
Citrus fruit inspires a new energy-absorbing metal structure

Intense 2-color double X-ray laser pulses: a powerful tool to study ultrafast processes

Highly insulating windows are very energy efficient, though expensive

Silver corrosion provides clues about performance in atmospheric conditions




The content herein, unless otherwise known to be public domain, are Copyright 1995-2014 - Space Media Network. AFP, UPI and IANS news wire stories are copyright Agence France-Presse, United Press International and Indo-Asia News Service. ESA Portal Reports are copyright European Space Agency. All NASA sourced material is public domain. Additional copyrights may apply in whole or part to other bona fide parties. Advertising does not imply endorsement,agreement or approval of any opinions, statements or information provided by Space Media Network on any Web page published or hosted by Space Media Network. Privacy Statement