愛污传媒

Skip to main content

Microsoft: State-sponsored Chinese hackers could be laying groundwork for disruption

A security surveillance camera is seen near the Microsoft office building in Beijing, July 20, 2021. (AP Photo/Andy Wong, File) A security surveillance camera is seen near the Microsoft office building in Beijing, July 20, 2021. (AP Photo/Andy Wong, File)
Share
BOSTON -

State-backed Chinese hackers have been targeting U.S. critical infrastructure and could be laying the technical groundwork for the potential disruption of critical communications between the U.S. and Asia during future crises, Microsoft said Wednesday.

The targets include sites in Guam, where the U.S. has a major military presence, the company said.

Hostile activity in cyberspace -- from espionage to the advanced positioning of malware for potential future attacks -- has become a hallmark of modern geopolitical rivalry.

Microsoft said in a blog post that the state-sponsored group of hackers, which it calls Volt Typhoon, has been active since mid-2021. It said organizations affected by the hacking -- which seeks persistent access -- are in the communications, manufacturing, utility, transportation, construction, maritime, information technology and education sectors.

Separately, the National Security Agency, the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and their counterparts from Australia, New Zealand, Canada and Britain published a joint advisory sharing technical details on "the recently discovered cluster of activity."

A Microsoft spokesman would not say why the software giant was making the announcement now or whether it had recently seen an uptick in targeting of critical infrastructure in Guam or at adjacent U.S. military facilities there, which include a major air base.

John Hultquist, chief analyst at Google's Mandiant cybersecurity intelligence operation, called Microsoft's announcement "potentially a really important finding."

"We don't see a lot of this sort of probing from China. It's rare," Hultquist said. "We know a lot about Russian and North Korean and Iranian cyber-capabilities because they have regularly done this." China has generally withheld use of the kinds of tools that could be used to seed, not just intelligence-gathering capabilities, but also malware for disruptive attacks in an armed conflict, he added.

Microsoft said the intrusion campaign placed a "strong emphasis on stealth" and sought to blend into normal network activity by hacking small-office network equipment, including routers. It said the intruders gained initial access through internet-facing Fortiguard devices, which are engineered to use machine-learning to detect malware.

The maker of Fortiguard devuces, Fortinet, did not immediately respond to an email seeking further details.

"For years, China has conducted aggressive cyber operations to steal intellectual property and sensitive data from organizations around the globe," said CISA Director Jen Easterly, urging mitigation of affected networks to prevent possible disruption. Bryan Vorndran, the FBI cyber division assistant director, called the intrusions "unacceptable tactics" in the same statement.

Tensions between Washington and Beijing -- which the U.S. national security establishment considers its main military, economic and strategic rival -- have been on the rise in recent months.

Those tensions spiked last year after then-House Speaker Nancy Pelosi's visit to democratically governed Taiwan, leading China, which claims the island as its territory, to launch military exercises around Taiwan.

U.S.-China relations became further strained earlier this year after the U.S. shot down a Chinese spy balloon that had crossed the United States.

CTVNews.ca Top Stories

BREAKING

BREAKING

A search has started at Prairie Green Landfill for the remains of two victims of a serial killer.

A memorial is growing outside a Walmart in Halifax after a 19-year-old employee was found dead inside an oven in the store Saturday night.

The president and CEO of New Brunswick-based Covered Bridge Potato Chips is taking an 'extended leave of absence' after being charged with domestic violence this past weekend.

He is a familiar face to residents of a neighbourhood just west of Roncesvalles Avenue.

Local Spotlight

A meteor lit up our region's sky last night 鈥 with a large fireball shooting across the horizon over Lake Erie at around 7:00 p.m.

Residents of Ottawa's Rideauview neighbourhood say an aggressive wild turkey has become a problem.

A man who lost his life while trying to rescue people from floodwaters, and a 13-year-old boy who saved his family from a dog attack, are among the Nova Scotians who received a medal for bravery Tuesday.

A newly minted Winnipegger is hoping a world record attempt will help bring awareness for the need for more pump track facilities in the city.

A Springfield, Ont. man is being hailed a 'hero' after running into his burning home to save his two infant children.

Hortense Anglin was the oldest graduate to make her way across the platform at York University's Fall Convocation ceremony this week. At the age of 87, she graduated with an Honours degree in Religious Studies.

Looking for a scare with good intentions this Halloween season? The ghosts and ghouls of Eganville, Ont. invite families to tour the Haunted Walk at Lekbor Manor.

The image of a sleepy Saskatchewan small town with 'not a lot going on' is a well-known anecdote. However, one Saskatchewan company is hoping to change that 鈥 and allow communities both on and off the beaten path to share their stories and advertise what they have to offer.

A Moncton, N.B., home has been donated to the Friends of The Moncton Hospital Foundation and will be transformed into a resource hub for people living with cancer.

Stay Connected