DebateGate
General Category => 3DHS => Topic started by: BSB on February 19, 2013, 12:57:26 AM
-
SPECIAL REPORT Monday, February 18, 2013 10:02 PM EST
China’s Army Is Seen as Tied to Hacking Against U.S.
A growing body of digital forensic evidence — confirmed by American intelligence officials who say they have tapped into the activity of a unit of cyberwarriors in China’s army — leaves little doubt that an overwhelming percentage of the attacks on American corporations, organizations and government agencies originate in and around a 12-story building on the outskirts of Shanghai.
An unusually detailed 60-page study, to be released Tuesday by Mandiant, an American computer security firm, tracks for the first time individual members of the most sophisticated of the Chinese hacking groups — known to many of its victims in the United States as “Comment Crew” or “Shanghai Group” — to the doorstep of the headquarters of a People’s Liberation Army unit.
While Comment Crew has drained terabytes of data from companies like Coca-Cola, increasingly its focus is on companies involved in the critical infrastructure of the United States — its electrical power grid, gas lines and waterworks.
READ MORE »
http://www.nytimes.com/2013/02/19/technology/chinas-army-is-seen-as-tied-to-hacking-against-us.html?emc=na (http://www.nytimes.com/2013/02/19/technology/chinas-army-is-seen-as-tied-to-hacking-against-us.html?emc=na)
-
I think this is what we should expect.
-
I expect that the US government is spying on the Chinese and lots of other countries as well.
-
It might of been posted here but remember artice about a global hacker contest and america didn't even rank to make the top ten list . China took seven spots.
I've met several people claiming to be hackers and if they are real I understand why america lost. Lets just say skateboarders have better work erhics. Way to into shortcuts .
Thier desktop setups are not well made. Totally vulnerable for crashes
-
I heard a very carefully worded reply by a representative of the Chinese government today. Very sophisticated diplomacy.
BSB
-
i kinda doubt the data is physically connected to the internet. the onlyway i can see to be access is some flaw that allow an electronic instruction to an employee to get the data to them. unless the government/company is stupid enough to actually have it internet accessable and hope thier encryption/firewall is good enough.
-
i kinda doubt the data is physically connected to the internet. the onlyway i can see to be access is some flaw that allow an electronic instruction to an employee to get the data to them. unless the government/company is stupid enough to actually have it internet accessable and hope thier encryption/firewall is good enough.
spear-phishing.
According to a new paper from Trend Micro entitled "Spear-Phishing Email: Most Favored APT Attack Bait," 91 percent of the targeted attacks it collected data on between February and September 2012 involved spear-phishing tactics that dupe a victim to open a malicious file or Website.
In a typical spear-phishing attack, an email is sent to specific individuals at an organization being targeted. The email will use social engineering focused on those particular individuals receiving the email as part of a ruse to get them to open a malicious file or visit a malicious site...................................................The most commonly used and shared file types were: .RTF (38 percent), .XLS (15 percent) and .ZIP (13 percent). Executable files (.exe) were not as popular, most likely because emails with those files were detected and blocked by security tools, the report speculated.
http://www.eweek.com/security/spear-phishing-emails-now-favorite-tactic-for-advanced-malware-threats/ (http://www.eweek.com/security/spear-phishing-emails-now-favorite-tactic-for-advanced-malware-threats/)
Crafting the right lure for a spear-phishing attack starts with research, and attackers do not have to look far to find the information they need.
“The methods criminals use to gather information for spear-phishing emails are surprisingly simple," said Scott Greaux, who is vice president of product management and services at PhishMe, which specializes in training organizations to deal with phishing attacks. "The amount of free information available to the public over the Internet is staggering and a few simple searches through Google, Facebook, LinkedIn, etc., can reveal enough information to craft a well-disguised spear-phishing email."
For example, a company’s LinkedIn page will provide the names of employees, and one of those individual's publicly-available LinkedIn page may reveal his or her corporate email address. The person's Facebook profile may include details about their personal life. From there, it isn't difficult for a criminal to create a personalized spear-phishing attack with enough information to appear genuine, Greaux said.
-
I understand the. Government having troube securing thier data ,but i dont understand corporation with better resource options having trouble.
We only see the companies that failed. I wonder are thier companies with a very high success rate of securing thier data? Or the nature of the security forbids them to be public anout it
-
The problem is there's no down side to doing this. China has nothing lose. On the other hand we have little to gain by hacking them. They aren't on our level yet. So.............
BSB
-
Not quite remember they have quite abit more resources thn america in the manufacturing level and with just abit more data can easily overtake america in technology .it's the very reason alot of tech work is outsourced there.
-
Since no sane government would use force to deal with this, better security or perhaps something like stuxnet is the logical defense against it.
-
"Not quite remember they have quite a bit more resources thn america in the manufacturing level and with just abit more data can easily overtake america in technology .it's the very reason alot of tech work is outsourced there."
Who is hacking who? That tells you who needs whose information. When China comes up with its own Apple, or Facebook, then they can talk.
BSB
-
China is doing a lot research into the scientific basis for traditional medicine (herbs and acupuncture, to name a couple) There is a lot of stuff the Chinese have discovered in the past 5000 years that even Americans know little about.
-
ok
I`m gonna say something about china that alot of americans are privy to this info. most chinese trust american medicine and products over thier own. the most in demand item is visine. they definately don`t trust thier local stuff to put into thier eyes. thier medicine is pretty good due to the fact they got way less restrictions than the states. but the quality varies massively.
I sometime joke about how expensive healthcare is here and say I`ll switch to chinese medicine. my family don`t laugh when I say that.
-
One of the things that these hackers want is inside dope on contracts , bids , marketing strategys ,etc...
If they get inside information their clients can be the lowest bidder , but not by too much.
This makes a honey trap work if the target is aware of the hacking, the infected machine can be loaded with bogus information before the virus is eradicated.
Potentially an adversary could be led to bid too low to make a profit, or to bid just a little too high to get the contract.
When research data is the target, fantastic research results can be faked , wasting the hacker clients time and money following dead ends.
-
"China is doing a lot research into the scientific basis for traditional medicine (herbs and acupuncture, to name a couple) There is a lot of stuff the Chinese have discovered in the past 5000 years that even Americans know little about."
Terrific. We shouldn't hear about them hacking US hospitals then.
BSB
-
If the Chinese continue as they have for the past 50 years they will surpass us, of course. It's inevitable. For one thing they surely have as high a percentage of innately gifted people as we have. In fact if you believe the IQ statistics based on race the Chinese most likely have a higher percentage of gifted people then we do. Now, in China's case, that percentage is going into over a billion people. In our case a common percentage would be going into over 300 million people. Right there you have a big advantage going China's way. But, to really take advantage of that, China has to have its own MIT, Harvard, and so forth. When that comes to pass, game, set, match, China.
There is one caveat for all concerned though. If the world continues to shrink as it has, and it will, it will become so homogenized that eventually it won't matter whether you're Chinese, Columbian, or South African. That will be a great day.
BSB
-
On the matter of IQ
a poster here who left stated his nephew was bumped by asians due to what he may believe is affirmative action.
He is right that his nephew is just as smart but i didn't have the heart to tell him the factor that got lot of asian student is not intelligence but hard work. The most common factors almost all student log in extra hours. In my town every single area with a high concentration of chinese has an after hours studies class.
The one flaw to working so hard is it does tend to injure ourselves. We're not the healthiest looking bunch of folks.