Cyberwarfare by China explained

Cyberwarfare by China is the aggregate of all combative activities in the cyberspace which are taken by organs of the People's Republic of China, including affiliated advanced persistent threat (APT) groups, against other countries.

Organization

While some details remain unconfirmed, it is understood that China organizes its resources as follows:

In 2017, Foreign Policy provided an estimated range for China's "hacker army" personnel, anywhere from 50,000 to 100,000 individuals.[2]

In response to claims that Chinese universities, businesses, and politicians have been subject to cyber espionage by the United States National Security Agency since 2009,[3] [4] the PLA announced a cyber security squad in May 2011 to defend their own networks.[5]

List of APTs

Since Xi Jinping became General Secretary of the Chinese Communist Party in 2012, the Ministry of State Security (MSS) gained more responsibility over cyberespionage vis-à-vis the People's Liberation Army, and currently oversees various APT groups.[6] According to security researcher Timo Steffens, "the APT landscape in China is run in a 'whole country' approach, leveraging skills from universities, individual, and private and public sectors".[7]

Accusations of espionage and cyber-attacks

See also: Chinese intelligence activity abroad, Allegations of intellectual property theft by China and Chinese information operations and information warfare.

Australia

In May 2013, ABC News claimed that the Chinese government stole blueprints to the headquarters of the Australian Security Intelligence Organisation (ASIO).[29] In May 2023, Australia, alongside other Five Eyes member states, identified the Chinese government behind the "Volt Typhoon" advanced persistent threat targeting critical infrastructure.[30] In July 2024, government agencies from eight nations, including the Australian Signals Directorate, released a joint advisory on APT40.[31] [32]

Canada

Officials in the Canadian government claimed that Chinese hackers compromised several departments within the federal government in early 2011, though the Chinese government has denied involvement.[33] In 2014, Canada's Chief Information Officer claimed that Chinese hackers compromised computer systems within the National Research Council.[34] In May 2023, Canada's Communications Security Establishment identified the Chinese government as being behind the "Volt Typhoon" advanced persistent threat targeting critical infrastructure.[35] In July 2024, government agencies from eight nations, including the Canadian Centre for Cyber Security, released a joint advisory on APT40.

Germany

In July 2024, government agencies from eight nations, including Germany's Federal Intelligence Service and Federal Office for the Protection of the Constitution, released a joint advisory on APT40.

India

Officials in the Indian government believe that attacks on Indian government networks, such as the attack on the Indian National Security Council, have originated from China. According to the Indian government, Chinese hackers are experts in operating botnets, of which were used in these attacks.[36] Additionally, other instances of Chinese cyberattacks against India's cyberspace have been reported in multitude.[37] [38]

Japan

In April 2021, Japan claimed that the Chinese military ordered cyberattacks on about 200 Japanese companies and research institutes, including JAXA.[39] In July 2024, government agencies from eight nations, including Japan's National Police Agency, released a joint advisory on APT40.

The Netherlands

In 2024, the Dutch Military Intelligence and Security Service and the General Intelligence and Security Service stated that Chinese state hackers penetrated a Dutch military network the prior year.[40]

New Zealand

In May 2023, New Zealand, alongside other Five Eyes member states, named the Chinese government as being behind the "Volt Typhoon" advanced persistent threat targeting critical infrastructure.[41] In March 2024, the Government Communications Security Bureau and New Zealand Government accused the Chinese government via APT40 of breaching its parliamentary network in 2021.[42] In July 2024, government agencies from eight nations, including the New Zealand National Cyber Security Centre, released a joint advisory on APT40.

South Korea

In July 2024, government agencies from eight nations, including South Korea's National Intelligence Service, released a joint advisory on APT40.

United States

See also: Chinese espionage in the United States, Operation Aurora and Titan Rain.

The United States has accused China of cyberwarfare attacks that targeted the networks of important American military, commercial, research, and industrial organizations. A Congressional advisory group has declared China "the single greatest risk to the security of American technologies"[43] and "there has been a marked increase in cyber intrusions originating in China and targeting U.S. government and defense-related computer systems".[44] [45] [46] China's cyberwarfare has expanded from cyber-espionage to "pre-positioning" activity for the sabotage and crippling of critical infrastructure.[47]

In January 2010, Google reported targeted attacks on its corporate infrastructure originating from China "that resulted in the theft of intellectual property from Google." Gmail accounts belonging to two human rights activists were compromised in an attack on Google's password system.[48] Chinese hackers also gained access to a database containing classified information about suspected spies, agents, and terrorists under surveillance by the US government.[49] American security experts connected the Google attack to various other political and corporate espionage efforts originating from China, which included spying against military, commercial, research, and industrial corporations. Obama administration officials called the cyberattacks "an increasingly serious cyber threat to US critical industries."

In addition to Google, at least 34 other companies have been attacked. Reported cases include Northrop Grumman, Symantec, Yahoo, Dow Chemical, and Adobe Systems.[50] Cyber-espionage has been aimed at both commercial and military interests.[51]

Diplomatic cables highlight US concerns that China is exploiting its access to Microsoft source code to boost its offensive and defensive capabilities.[52]

A number of private computer security firms have stated that they have growing evidence of cyber-espionage efforts originating from China, including the "Comment Group".[53]

China has denied accusations of cyberwarfare,[54] and has accused the United States of engaging in cyber-warfare against it, accusations which the United States denies.[55] [56] [57] [58] [59]

In 2011, a Chinese state TV program displayed outdated screenshots of a Chinese military institute performing cyber attacks on a US-based dissident entity.[60] The direct visual evidence from an official Chinese source challenges China's claims that it never engages in overseas hacking for government purposes.

During March 2013, high-level discussions continued.[61]

In May 2014, a federal grand jury in the United States indicted five PLA Unit 61398 officers on charges of theft of confidential business information from U.S. commercial firms and planting malware on their computers.[62] [63]

In September 2014, a Senate Armed Services Committee probe revealed hackers associated with the Chinese government committing various intrusions of computer systems belonging to U.S. airlines, technology companies and other contractors involved with the movement of U.S. troops and military equipment,[64] and in October 2014, The FBI added that hackers, who they believe to be backed by the Chinese government, have recently launched attacks on U.S. companies.[65]

In 2015, the U.S. Office of Personnel Management (OPM) announced that it had been the target of a data breach targeting the records of as many as 21.5 million people.[66] The Washington Post reported that the attack came from China, citing unnamed government officials.[67] FBI director James Comey explained "it is a very big deal from a national security perspective and a counterintelligence perspective. It's a treasure trove of information about everybody who has worked for, tried to work for, or works for the United States government."[68]

In October 2018, Bloomberg Businessweek published a report, citing unnamed corporate and governmental sources, which claimed that the PLA had forced Supermicro's Chinese sub-contractors to add microchips with hardware backdoors to its servers. The report claimed that the compromised servers had been sold to U.S. government divisions (including the CIA and Department of Defense) and contractors and at least 30 commercial clients.[69]

In 2019, a study showed continued attacks on the US Navy and its industrial partners.[70]

In February 2020, a US federal grand jury charged four members of China's People's Liberation Army (PLA) with the 2017 Equifax hack.[71] The official account of FBI stated on Twitter that they played a role in "one of the largest thefts of personally identifiable information by state-sponsored hackers ever recorded", involving "145 million Americans".[72]

The Voice of America reported in April 2020 that "U.S. intelligence agencies concluded the Chinese hackers meddled in both the 2016 and 2018 elections" and said "there have already been signs that China-allied hackers have engaged in so-called "spear-phishing" attacks on American political targets" ahead of the 2020 United States elections.[73]

In March 2021, United States intelligence community released analysis in finding that China had considered interfering with the election but decided against it on concerns it would fail or backfire.[74]

In April 2021, FireEye said that suspected Chinese hackers used a zero-day attack against Pulse Connect Secure devices, a VPN device, in order to spy on dozens of government, defense industry and financial targets in the U.S. and Europe.[75] [76] [77] [78]

In May 2023, Microsoft and Western intelligence agencies reported that a Chinese state-sponsored hacking group affiliated with the PLA called "Volt Typhoon" had targeted critical infrastructure and military installations in Guam, Hawaii, Texas and elsewhere.[79] [80] [81] In January 2024, US authorities stated that they disrupted an operation by Volt Typhoon that had access to critical infrastructure in the US for at least five years.[82] [83]

In February 2024, OpenAI announced that it had shut down accounts used by the Charcoal Typhoon and Salmon Typhoon hacking groups. The groups had been using their services to research companies, intelligence agencies, cybersecurity tools and evasion techniques, translate technical papers, write and refactor code, and create phishing campaign content.[27] [28] The same month, leaked documents from an MSS, PLA, and MPS contractor based in Shanghai called I-Soon, also known as Auxun, provided details into a campaign to harass dissidents, activists, critical academics, and Uyghurs overseas.[84] [85] [86]

In July 2024, government agencies from eight nations, including the National Security Agency and Cybersecurity and Infrastructure Security Agency, released a joint advisory on APT40.

Taiwan

Comparing the semiconductor industry in China mainland and Taiwan today, Taiwan is the leader in terms of overall competitiveness. On 6 August 2020, Wired published a report, stating that "Taiwan has faced existential conflict with China for its entire existence and has been targeted by China's state-sponsored hackers for years. But an investigation by one Taiwanese security firm has revealed just how deeply a single group of Chinese hackers was able to penetrate an industry at the core of the Taiwanese economy, pillaging practically its entire semiconductor industry."[87]

Ukraine

In April 2022, The Times reported that days prior to the start of the 2022 Russian invasion of Ukraine, a cyberwarfare unit of the People's Liberation Army launched cyberattacks against hundreds of Ukrainian government sites, according to officials of the Security Service of Ukraine.[88] [89]

United Kingdom

In May 2023, the UK's National Cyber Security Centre, alongside other Five Eyes member states, identified the Chinese government behind the "Volt Typhoon" advanced persistent threat targeting critical infrastructure.[90]

In March 2024, the UK government and the United States Department of the Treasury's Office of Foreign Assets Control (OFAC) jointly sanctioned a Chinese MSS front company called Wuhan Xiaoruizhi Science and Technology and affiliated individuals for breaching the Electoral Commission and placing malware in critical infrastructure.[91] [92]

In July 2024, government agencies from eight nations, including the UK's National Cyber Security Centre, released a joint advisory on APT40.

The Vatican

In July 2020, it was reported that Chinese state-sponsored hackers operating under the named RedDelta hacked the Vatican's computer network ahead of negotiations between China and the Vatican.[93]

IP hijacking

During 18 minutes on April 8, 2010, state-owned China Telecom advertised erroneous network routes that instructed "massive volumes" of U.S. and other foreign Internet traffic to go through Chinese servers. A US Defense Department spokesman told reporters that he did not know if "we've determined whether that particular incident ... was done with some malicious intent or not" and China Telecom denied the charge that it "hijacked" U.S. Internet traffic.[94]

See also

Notes and References

  1. Elegant . Simon . Cyberwarfare: The Issue China Won't Touch . . November 18, 2009 . October 25, 2010 . October 24, 2010 . https://web.archive.org/web/20101024150815/http://www.time.com/time/world/article/0,8599,1940009,00.html . dead .
  2. " China's Hacker Army ". Foreign Policy.
  3. Web site: Chan . Kelvin . June 13, 2013 . Leaker Snowden alleges NSA hacking on China, world . 2024-07-14 . . en . . November 25, 2020 . https://web.archive.org/web/20201125203504/https://phys.org/news/2013-06-leaker-snowden-alleges-nsa-hacking.html . live .
  4. News: Snowden says U.S. hacking targets China; NSA points to thwarted attacks. The Japan Times. June 14, 2013. June 13, 2013. June 15, 2013. https://web.archive.org/web/20130615003133/http://www.japantimes.co.jp/news/2013/06/14/world/u-s-hacking-effort-targets-china-snowden/. live.
  5. Beech, Hannah. "Meet China's Newest Soldiers: An Online Blue Army". Time, 27 May 2011.
  6. News: Mozur. Paul. Buckley. Chris. 2021-08-26. Spies for Hire: China's New Breed of Hackers Blends Espionage and Entrepreneurship. en-US. The New York Times. 2021-08-27. 0362-4331. August 27, 2021. https://web.archive.org/web/20210827003547/https://www.nytimes.com/2021/08/26/technology/china-hackers.html. live.
  7. Web site: Stone . Jeff . Foreign spies use front companies to disguise their hacking, borrowing an old camouflage tactic . October 5, 2020 . cyberscoop.com . Cyberscoop . 11 October 2020 . March 22, 2021 . https://web.archive.org/web/20210322014903/https://www.cyberscoop.com/chinese-iranian-hackers-front-companies/ . live .
  8. Web site: Buckeye: Espionage Outfit Used Equation Group Tools Prior to Shadow Brokers Leak. 2019-05-07. Symantec. live. https://archive.today/20190507054409/https://www.symantec.com/blogs/threat-intelligence/buckeye-windows-zero-day-exploit. 2019-05-07. 2019-07-23.
  9. News: APT17: Hiding in Plain Sight - FireEye and Microsoft Expose Obfuscation Tactic . . May 2015 . January 21, 2024 . November 24, 2023 . https://web.archive.org/web/20231124143647/https://www2.fireeye.com/rs/fireye/images/APT17_Report.pdf . live .
  10. Web site: Wocao APT20 . fox-it.com . 2019-12-19 . Maarten . van Dantzig . Erik . Schamper . . 23 December 2019 . 22 March 2021 . https://web.archive.org/web/20210322014904/https://resources.fox-it.com/rs/170-CAK-271/images/201912_Report_Operation_Wocao.pdf .
  11. Web site: Vijayan . Jai . China-Based Cyber Espionage Group Targeting Orgs in 10 Countries . December 19, 2019 . www.darkreading.com . Dark Reading . 12 January 2020 . May 7, 2021 . https://web.archive.org/web/20210507025313/https://www.darkreading.com/attacks-breaches/china-based-cyber-espionage-group-targeting-orgs-in-10-countries/d/d-id/1336676 . live .
  12. Web site: Lyngaas . Sean . Chinese hackers posed as Iranians to breach Israeli targets, FireEye says . www.cyberscoop.com . 10 August 2021 . 15 August 2021 . November 29, 2023 . https://web.archive.org/web/20231129204248/https://cyberscoop.com/china-israel-iran-fireeye-hacking/ . live .
  13. Web site: Lyngaas . Sean . Right country, wrong group? Researchers say it wasn't APT10 that hacked Norwegian software firm . February 12, 2019 . www.cyberscoop.com . Cyberscoop . 16 October 2020 . May 7, 2021 . https://web.archive.org/web/20210507025345/https://www.cyberscoop.com/apt10-apt31-recorded-future-rapid7-china/ . live .
  14. Web site: Lyngaas . Sean . Google offers details on Chinese hacking group that targeted Biden campaign . October 16, 2020 . Cyberscoop . 16 October 2020 . May 7, 2021 . https://web.archive.org/web/20210507025313/https://www.cyberscoop.com/biden-chinese-hacking-google-security-russia/ . live .
  15. Web site: How Microsoft names threat actors . January 16, 2024 . Microsoft . 21 January 2024 . July 10, 2024 . https://web.archive.org/web/20240710235817/https://learn.microsoft.com/en-us/defender-xdr/microsoft-threat-actor-naming . live .
  16. Web site: 2024-03-19 . Treasury Sanctions China-Linked Hackers for Targeting U.S. Critical Infrastructure . 2024-03-25 . . en . March 25, 2024 . https://web.archive.org/web/20240325174521/https://home.treasury.gov/news/press-releases/jy2205 . live .
  17. Web site: Double Dragon APT41, a dual espionage and cyber crime operation . . 2019-10-16 . 2020-04-14 . May 7, 2021 . https://web.archive.org/web/20210507025313/https://content.fireeye.com/apt-41/rpt-apt41/ . dead .
  18. Web site: May 17, 2020 . Bureau names ransomware culprits . live . https://web.archive.org/web/20210322015319/https://www.taipeitimes.com/News/taiwan/archives/2020/05/17/2003736564 . March 22, 2021 . 22 May 2020 . .
  19. News: Sabin . Sam . October 26, 2022 . New pro-China disinformation campaign targets 2022 elections: Report . . October 27, 2022 . October 26, 2022 . https://web.archive.org/web/20221026182732/https://www.axios.com/2022/10/26/disinformation-campaign-midterms-china-dragonbridge-mandiant . live .
  20. News: Milmo . Dan . 2024-04-05 . China will use AI to disrupt elections in the US, South Korea and India, Microsoft warns . 2024-04-07 . . en-GB . 0261-3077 . May 25, 2024 . https://web.archive.org/web/20240525185211/https://www.theguardian.com/technology/2024/apr/05/china-using-ai-disrupt-elections . live .
  21. Web site: Naraine . Ryan . Microsoft: Multiple Exchange Server Zero-Days Under Attack by Chinese Hacking Group . 2021-03-02 . English . securityweek.com . Wired Business Media . 2021-03-03 . July 6, 2023 . https://web.archive.org/web/20230706202313/https://www.securityweek.com/microsoft-4-exchange-server-zero-days-under-attack-chinese-apt-group/ . live .
  22. Web site: Burt . Tom . New nation-state cyberattacks . 2021-03-02 . English . blogs.microsoft.com . Microsoft . 2021-03-03 . March 2, 2021 . https://web.archive.org/web/20210302211855/https://blogs.microsoft.com/on-the-issues/2021/03/02/new-nation-state-cyberattacks/ . live .
  23. Web site: 'LightBasin' hackers spent 5 years hiding on telco networks . 2021-10-20 . 2022-04-08 . . Nichols . Shaun . November 29, 2023 . https://web.archive.org/web/20231129204219/https://www.techtarget.com/searchsecurity/news/252508413/LightBasin-hackers-spent-5-years-hiding-on-telco-networks . live .
  24. Web site: LightBasin hacking group breaches 13 global telecoms in two years . 2021-10-19 . 2022-04-08 . . Ilascu . Ionut . July 24, 2023 . https://web.archive.org/web/20230724084013/https://www.bleepingcomputer.com/news/security/lightbasin-hacking-group-breaches-13-global-telecoms-in-two-years/ . live .
  25. News: Cimpanu . Catalin . Hackers target the air-gapped networks of the Taiwanese and Philippine military . . 16 May 2020 . March 22, 2021 . https://web.archive.org/web/20210322015315/https://www.zdnet.com/article/hackers-target-the-air-gapped-networks-of-the-taiwanese-and-philippine-military/ . live .
  26. Web site: Intelligence . Microsoft Threat . 2023-05-24 . Volt Typhoon targets US critical infrastructure with living-off-the-land techniques . 2023-05-26 . Microsoft Security Blog . en-US . January 17, 2024 . https://web.archive.org/web/20240117093138/https://www.microsoft.com/en-us/security/blog/2023/05/24/volt-typhoon-targets-us-critical-infrastructure-with-living-off-the-land-techniques/ . live .
  27. Web site: Disrupting malicious uses of AI by state-affiliated threat actors. February 14, 2024. February 16, 2024. February 16, 2024. https://web.archive.org/web/20240216151959/https://openai.com/blog/disrupting-malicious-uses-of-ai-by-state-affiliated-threat-actors. live.
  28. Web site: Staying ahead of threat actors in the age of AI. Microsoft. February 14, 2024. February 16, 2024. February 16, 2024. https://web.archive.org/web/20240216163312/https://www.microsoft.com/en-us/security/blog/2024/02/14/staying-ahead-of-threat-actors-in-the-age-of-ai/. live.
  29. News: May 29, 2013 . George Brandis briefed by ASIO on claims China stole classified blueprints of Canberra headquarters . live . https://web.archive.org/web/20130530144444/http://www.abc.net.au/news/2013-05-29/brandis-briefed-by-asio-on-china-hacking-claims/4719886 . May 30, 2013 . May 29, 2013 . ABC News.
  30. News: Evans . Jake . 2023-05-24 . Australia joins intelligence partners to blame China for US infrastructure cyber attack . 2024-01-12 . . en-AU . January 12, 2024 . https://web.archive.org/web/20240112155540/https://www.abc.net.au/news/2023-05-25/australian-intelligence-blames-china-for-us-hack/102390024 . live .
  31. News: Cherney . Mike . July 9, 2024 . U.S., Allies Issue Rare Warning on Chinese Hacking Group . subscription . live . July 9, 2024 . . July 9, 2024 . https://web.archive.org/web/20240709180605/https://www.wsj.com/politics/national-security/u-s-allies-issue-rare-warning-on-chinese-hacking-group-9eebb0ce .
  32. Web site: 2024-07-10 . Australia accuses China of cyber espionage . 2024-07-10 . . en . July 10, 2024 . https://web.archive.org/web/20240710235817/https://www.voanews.com/a/australia-accuses-china-of-cyber-espionage/7692118.html . live .
  33. News: February 16, 2011 . Foreign hackers attack Canadian government . live . https://web.archive.org/web/20110218145804/http://www.cbc.ca/politics/story/2011/02/16/pol-weston-hacking.html . February 18, 2011 . February 17, 2011 . .
  34. News: July 29, 2014 . Chinese cyberattack hits Canada's National Research Council . live . https://web.archive.org/web/20140729193244/http://www.cbc.ca/news/politics/chinese-cyberattack-hits-canada-s-national-research-council-1.2721241 . July 29, 2014 . July 29, 2014 . .
  35. Web site: Boynton . Sean . May 24, 2023 . A Chinese cyber espionage operation is hitting U.S. infrastructure, West warns . 2024-01-12 . . en-US . January 12, 2024 . https://web.archive.org/web/20240112175320/https://globalnews.ca/news/9720663/canada-five-eyes-china-cyber-threat/ . live .
  36. News: China mounts cyber attacks on Indian sites . India . May 5, 2008 . October 25, 2010 . August 26, 2011 . https://web.archive.org/web/20110826225336/http://articles.timesofindia.indiatimes.com/2008-05-05/india/27760718_1_cyber-warfare-government-networks-china . . dead .
  37. News: 'നിശബ്ദ യുദ്ധ'ത്തിന് പിന്നിൽ ചൈന; ടാർഗറ്റ് ഇന്ത്യയും അമേരിക്കയും. ManoramaOnline. 2018-06-06. June 6, 2018. https://web.archive.org/web/20180606071937/https://www.manoramaonline.com/technology/technology-news/2018/06/06/china-linked-to-cyberattacks-dating-from-2009-report-says.html. live.
  38. News: Rising . David . 2022-04-07 . Chinese hackers reportedly target India's power grid . 2022-04-10 . . en . April 10, 2022 . https://web.archive.org/web/20220410160441/https://apnews.com/article/technology-business-china-india-b9e32f0d36843b2ac2764d0b4ae2c7e6 . live .
  39. News: 2021-04-20. Chinese military seen behind Japan cyberattacks. 2021-04-23. The Japan Times. en-US. April 23, 2021. https://web.archive.org/web/20210423195919/https://www.japantimes.co.jp/news/2021/04/20/national/chinese-military-japan-cyberattacks/. live.
  40. News: February 6, 2024 . Chinese spies hacked Dutch defence network last year - intelligence agencies . February 6, 2024 . Reuters.
  41. News: Ensor . Jamie . 25 May 2023 . New Zealand, Five Eyes issue alert warning of China state actor engaging in 'malicious cyber activity' . 2024-01-12 . . en . January 12, 2024 . https://web.archive.org/web/20240112175320/https://www.newshub.co.nz/home/politics/2023/05/new-zealand-five-eyes-issues-alert-warning-of-china-state-actor-engaging-in-malicious-cyber-activity.html . live .
  42. News: Pearse . Adam . 26 March 2024 . Parliament systems targeted by China-based hackers . 28 March 2024 . . en-NZ . https://web.archive.org/web/20240326175340/https://www.nzherald.co.nz/nz/politics/new-zealand-parliament-systems-targeted-by-china-based-hackers/RNUEMYIZFBAILLCOJ7QMIUZJ5Y/. 26 March 2024. live.
  43. News: Claburn . Thomas . China Cyber Espionage Threatens U.S., Report Says . . November 1, 2010 . dead . https://web.archive.org/web/20100227050404/http://www.informationweek.com/news/government/security/showArticle.jhtml?articleID=221900505 . February 27, 2010 . mdy-all .
  44. News: Nakashima . Ellen . Ellen Nakashima . Eunjung Cha . Ariana . 2010-01-14 . Google China cyberattack part of vast espionage campaign, experts say . 2024-07-14 . . en-US . 0190-8286 . February 11, 2021 . https://web.archive.org/web/20210211044434/https://www.washingtonpost.com/wp-dyn/content/article/2010/01/13/AR2010011300359.html . live .
  45. News: McMillan . Robert . Report Says China Ready for Cyber-war, Espionage . . November 1, 2010 . October 23, 2009 . April 2, 2010 . https://web.archive.org/web/20100402231533/http://www.pcworld.com/article/174210/report_says_china_ready_for_cyberwar_espionage.html . live .
  46. News: Gorman . Siobhan . 2009-04-09 . Electricity Grid in U.S. Penetrated By Spies . subscription . live . https://web.archive.org/web/20180625053608/https://www.wsj.com/articles/SB123914805204099085 . June 25, 2018 . 2022-04-01 . . en-US . 0099-9660.
  47. News: June 13, 2024 . The new front in China's cyber campaign against America . subscription . live . https://archive.today/20240613140044/https://www.economist.com/international/2024/06/13/the-new-front-in-chinas-cyber-campaign-against-america . June 13, 2024 . 2024-06-15 . . 0013-0613.
  48. "Google cyber attack hit password system" The New York Times, Reuters, April 19, 2010.
  49. Web site: Goodin . Dan . May 21, 2013 . Chinese hackers who breached Google reportedly targeted classified data . live . https://web.archive.org/web/20141108145002/http://arstechnica.com/security/2013/05/chinese-hackers-who-breached-google-reportedly-targeted-classified-data/ . November 8, 2014 . November 8, 2014 . Ars Technica.
  50. News: Jacobs . Andrew . Helft . Miguel . 2010-01-12 . Google, Citing Attack, Threatens to Exit China . 2024-07-14 . . en-US . 0362-4331 . February 2, 2017 . https://web.archive.org/web/20170202103605/http://www.nytimes.com/2010/01/13/world/asia/13beijing.html . live .
  51. Zetter . Kim . Google Hackers Targeted Source Code of More Than 30 Companies . . November 1, 2010 . dead . January 13, 2010 . https://web.archive.org/web/20100918205747/http://www.wired.com/threatlevel/2010/01/google-hack-attack/ . September 18, 2010 .
  52. News: 2010-12-04 . US embassy cables: China uses access to Microsoft source code to help plot cyber warfare, US fears . 2024-07-14 . . en-GB . 0261-3077.
  53. Riley, Michael, and Dune Lawrence, "Hackers Linked to China's Army Seen From EU to D.C. ", Bloomberg L.P., 27 July 2012
  54. News: China's Response to BusinessWeek . . April 10, 2008 . February 12, 2013 . October 25, 2012 . https://web.archive.org/web/20121025134928/http://www.businessweek.com/stories/2008-04-09/chinas-response-to-businessweek . dead .
  55. News: Zetter . Kim . China Accuses US of Cyberwarfare . . October 23, 2010 . January 25, 2010 . December 28, 2010 . https://web.archive.org/web/20101228021721/http://www.wired.com/threatlevel/2010/01/china-accuses-us/ . live .
  56. News: Nakashima . Ellen . Ellen Nakashima . 2023-05-20 . Report on 'Operation Shady RAT' identifies widespread cyber-spying . 2024-07-14 . . en-US . 0190-8286 . April 24, 2020 . https://web.archive.org/web/20200424134140/https://www.washingtonpost.com/national/national-security/report-identifies-widespread-cyber-spying/2011/07/29/gIQAoTUmqI_story.html . live .
  57. News: Anderlini, Jamil . January 15, 2010 . The Chinese dissident's 'unknown visitors' . subscription . live . https://web.archive.org/web/20100910075747/http://www.ft.com/cms/s/0/c590cdd0-016a-11df-8c54-00144feabdc0.html . September 10, 2010 . August 3, 2011 . Financial Times.
  58. News: Barnes, Julian E. . China's computer hacking worries Pentagon . . March 4, 2008 . March 4, 2008 . https://web.archive.org/web/20080310042216/http://www.latimes.com/news/nationworld/world/la-fg-uschina4mar04%2C1%2C3559963.story . March 10, 2008 . dead . mdy-all .
  59. Web site: Brookes, Peter . Flashpoint: The Cyber Challenge: Cyber attacks are growing in number and sophistication . Family Security Matters . March 13, 2008 . April 7, 2008 . dead . https://web.archive.org/web/20080329074454/http://www.familysecuritymatters.org/homeland.php?id=1386912 . March 29, 2008 . mdy-all .
  60. Web site: Erickson . Andrew . Collins . Gabe . August 25, 2011 . Did China Tip Cyber War Hand? . 2024-07-14 . . en-US . April 2, 2023 . https://web.archive.org/web/20230402022649/https://thediplomat.com/2011/08/did-china-tip-cyber-war-hand/ . live .
  61. https://www.wsj.com/articles/SB10001424127887324373204578372132763639230 "The U.S. Presses on Cyberthreats; In Beijing, Treasury Secretary Frames Issue as a Top Priority in Ties With China"
  62. Finkle, J., Menn, J., Viswanatha, J. "U.S. accuses China of cyber spying on American companies". Reuters, May 19, 2014.
  63. News: Clayton . Mark . May 19, 2014 . US indicts five in China's secret 'Unit 61398' for cyber-spying on US firms . 2024-07-14 . . 0882-7729 . May 20, 2014 . https://web.archive.org/web/20140520075207/http://www.csmonitor.com/World/Security-Watch/Cyber-Conflict-Monitor/2014/0519/US-indicts-five-in-China-s-secret-Unit-61398-for-cyber-spying-on-US-firms . live .
  64. https://www.reuters.com/article/us-usa-military-cyberspying/chinese-hackers-breach-u-s-military-contractors-senate-probe-idUSKBN0HC1TA20140917 Chinese hacked U.S. military contractors, Senate panel finds
  65. https://www.reuters.com/article/us-usa-cybersecurity-china/fbi-warns-u-s-businesses-of-cyber-attacks-blames-beijing-idUSKCN0I42MU20141016 FBI warns U.S. businesses of cyber attacks, blames Beijing
  66. News: OPM says 5.6 million fingerprints stolen in the biggest cyber attack in US history. America doesn't have anything together this is why this happened . . Andrea . Peterson . 2015-09-24 . August 26, 2017 . September 15, 2017 . https://web.archive.org/web/20170915160954/http://www.independent.co.uk/news/world/americas/opm-says-56-million-fingerprints-stolen-in-biggest-cyber-attack-in-us-history-10515256.html . live .
  67. News: Massive Data Breach Puts 4 Million Federal Employees' Records At Risk . NPR . 4 June 2015 . Sanders, Sam . April 5, 2018 . June 5, 2015 . https://web.archive.org/web/20150605041629/http://www.npr.org/sections/thetwo-way/2015/06/04/412086068/massive-data-breach-puts-4-million-federal-employees-records-at-risk . live .
  68. "Hacks of OPM databases compromised 22.1 million people, federal authorities say ". The Washington Post. July 9, 2015.
  69. News: 2018-10-04 . China Used a Tiny Chip in a Hack That Infiltrated U.S. Companies . 2024-03-14 . . en . October 4, 2018 . https://web.archive.org/web/20181004172410/https://www.bloomberg.com/news/features/2018-10-04/the-big-hack-how-china-used-a-tiny-chip-to-infiltrate-america-s-top-companies . live .
  70. News: Navy, Industry Partners Are 'Under Cyber Siege' by Chinese Hackers, Review Asserts; Hacking threatens U.S.'s standing as world's leading military power, study says . Gordon Lubold . Dustin Volz . March 12, 2019 . WSJ.com . March 14, 2019 . March 13, 2019 . https://web.archive.org/web/20190313211150/https://www.wsj.com/articles/navy-industry-partners-are-under-cyber-siege-review-asserts-11552415553 . live .
  71. News: US charges 4 members of Chinese military with Equifax hack . . February 10, 2020 . February 10, 2020 . February 11, 2020 . https://web.archive.org/web/20200211002332/https://www.cnn.com/2020/02/10/politics/equifax-chinese-military-justice-department/index.html . live .
  72. Web site: @FBI on Twitter. February 11, 2020. 2020-08-16. https://web.archive.org/web/20200816084750/https://twitter.com/FBI/status/1226896376971300865. live.
  73. News: China, Caught Meddling in Past Two US Elections, Claims 'Not Interested' in 2020 Vote . . 30 April 2020 . May 17, 2020 . May 18, 2020 . https://web.archive.org/web/20200518183055/https://www.voanews.com/east-asia-pacific/china-caught-meddling-past-two-us-elections-claims-not-interested-2020-vote . live .
  74. News: Barnes. Julian E.. 2021-03-16. Russian Interference in 2020 Included Influencing Trump Associates, Report Says. en-US. The New York Times. 2021-04-21. 0362-4331. April 21, 2021. https://web.archive.org/web/20210421043615/https://www.nytimes.com/2021/03/16/us/politics/election-interference-russia-2020-assessment.html. live.
  75. News: 2021-04-20 . Suspected Chinese hackers spied on U.S., European targets . live . https://web.archive.org/web/20210421043613/https://www.pbs.org/newshour/world/suspected-chinese-hackers-spied-on-u-s-european-targets . April 21, 2021 . 2021-04-21 . . en-us.
  76. News: China-linked hackers used VPN flaw to target U.S. defense industry -researchers. 2021-04-21. in.finance.yahoo.com. en-US. April 21, 2021. https://web.archive.org/web/20210421043613/https://in.finance.yahoo.com/news/china-linked-hackers-used-pulse-141437468.html. live.
  77. News: Miller . Maggie . 2021-04-20 . Multiple agencies breached by hackers using Pulse Secure vulnerabilities . live . https://web.archive.org/web/20210421043612/https://thehill.com/policy/cybersecurity/549326-multiple-agencies-breached-by-hackers-using-pulse-secure-vulnerabilities . April 21, 2021 . 2021-04-21 . . en.
  78. News: 2021-04-20 . China-linked hackers used VPN flaw to target U.S. defense industry -researchers . live . https://web.archive.org/web/20210421043615/https://www.reuters.com/technology/china-linked-hackers-used-pulse-secure-flaw-target-us-defense-industry-2021-04-20/ . April 21, 2021 . 2021-04-21 . Reuters.
  79. News: Siddiqui . Zeba . Bing . Christopher . Bing . Christopher . 2023-05-25 . Chinese hackers spying on US critical infrastructure, Western intelligence says . en . . 2023-05-25 . May 25, 2023 . https://web.archive.org/web/20230525195511/https://www.reuters.com/technology/microsoft-says-china-backed-hacker-targeted-critical-us-infrastructure-2023-05-24/ . live .
  80. News: Sanger . David E. . David E. Sanger . Barnes . Julian E. . 2023-07-29 . U.S. Hunts Chinese Malware That Could Disrupt American Military Operations . live . https://web.archive.org/web/20230729192609/https://www.nytimes.com/2023/07/29/us/politics/china-malware-us-military-bases-taiwan.html . July 29, 2023 . 2023-07-29 . . en-US . 0362-4331.
  81. News: Nakashima . Ellen . Ellen Nakashima . Menn . Joseph . 2023-12-12 . China's cyber army is invading critical U.S. services . live . https://web.archive.org/web/20231213161633/https://www.washingtonpost.com/technology/2023/12/11/china-hacking-hawaii-pacific-taiwan-conflict/ . December 13, 2023 . 2023-12-16 . . en-US . 0190-8286.
  82. News: Volz . Dustin . January 31, 2024 . U.S. Disables Chinese Hacking Operation That Targeted Critical Infrastructure . subscription . live . https://web.archive.org/web/20240206054554/https://www.wsj.com/politics/national-security/u-s-disables-chinese-hacking-operation-that-targeted-critical-infrastructure-184bb407 . February 6, 2024 . February 6, 2024 . The Wall Street Journal.
  83. Web site: Lyngaas . Sean . 2024-02-07 . Chinese hackers have lurked in some US infrastructure systems for 'at least five years' . live . https://web.archive.org/web/20240208061022/https://www.cnn.com/2024/02/07/politics/china-hacking-us-agencies-report/index.html . February 8, 2024 . 2024-02-08 . . en.
  84. News: McLaughlin . Jenna . February 22, 2024 . Leaked document trove shows a Chinese hacking scheme focused on harassing dissidents . February 22, 2024 . . February 22, 2024 . https://web.archive.org/web/20240222200634/https://www.npr.org/2024/02/22/1233178131/leaked-document-trove-shows-a-chinese-hacking-scheme-focused-on-harassing-dissid . live .
  85. News: 2024-02-22 . Leaked files from Chinese firm show vast international hacking effort . 2024-02-24 . . en.
  86. News: Mozur . Paul . Bradsher . Keith . Liu . John . Krolik . Aaron . 2024-02-22 . Leaked Files Show the Secret World of China's Hackers for Hire . 2024-02-23 . . en-US . 0362-4331 . February 23, 2024 . https://web.archive.org/web/20240223024723/https://www.nytimes.com/2024/02/22/business/china-leaked-files.html . live .
  87. Greenberg . Andy . Andy Greenberg . August 6, 2020 . Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry . 2024-07-14 . . en-US . 1059-1028 . March 22, 2021 . https://web.archive.org/web/20210322015355/https://www.wired.com/story/chinese-hackers-taiwan-semiconductor-industry-skeleton-key/ . live .
  88. News: Tucker . Maxim . 2022-04-01 . China accused of hacking Ukraine days before Russian invasion . en . . 2022-04-01 . 0140-0460 . July 10, 2024 . https://web.archive.org/web/20240710155121/https://www.thetimes.com/world/russia-ukraine-war/article/china-cyberattack-ukraine-z9gfkbmgf . live .
  89. News: 2022-04-07 . Mystery of alleged Chinese hack on eve of Ukraine invasion . en-GB . . 2022-04-08.
  90. News: Milmo . Dan . 2023-05-25 . GCHQ warns of fresh threat from Chinese state-sponsored hackers . 2024-01-12 . . en-GB . 0261-3077 . January 12, 2024 . https://web.archive.org/web/20240112155823/https://www.theguardian.com/technology/2023/may/25/experts-warn-against-china-sponsored-cyber-attacks-on-uk-networks . live .
  91. News: Psaledakis . Daphne . Pearson . James . March 25, 2024 . US, UK accuse China over spy campaign that may have hit millions . March 25, 2024 . Reuters.
  92. Web site: Hui . Sylvia . 2024-03-25 . US and UK announce sanctions over China-linked hacks on election watchdog and lawmakers . 2024-03-25 . . en . March 25, 2024 . https://web.archive.org/web/20240325131113/https://apnews.com/article/uk-china-cyberattacks-parliament-election-770e7b00454b63ad424000feecddd0c1 . live .
  93. News: Sanger . David E. . David E. Sanger . Wong . Edward . Edward Wong . Horowitz . Jason . 2020-07-28 . The Vatican Is Said to Be Hacked From China Before Talks With Beijing . 2024-07-14 . . en-US . 0362-4331 . August 6, 2020 . https://web.archive.org/web/20200806151257/https://www.nytimes.com/2020/07/28/us/politics/china-vatican-hack.html . live .
  94. News: Wolf . Jim . November 19, 2010 . Pentagon says "aware" of China Internet rerouting . live . https://web.archive.org/web/20101123021808/http://www.reuters.com/article/idUSTRE6AI4HJ20101119 . November 23, 2010 . November 26, 2010 . Reuters.