Security researchers have many names for the hacking group that is one of the suspects for the cyberattack on the US government’s Office of Personnel Management: PinkPanther, KungFu Kittens, Group 72 and, most famously, Deep Panda.
However, to Jared Myers and colleagues at cybersecurity company RSA, it is called Shell Crew and Myers’ team is one of the few who has watched it mid-assault — and eventually repulsed it.
Myers’ account of a months-long battle with the group illustrates the challenges governments and companies face in defending against hackers that researchers believe are linked to the Chinese government — a charge Beijing denies.
Photo: Reuters
“The Shell Crew is an extremely efficient and talented group,” Myers said in an interview.
Shell Crew, or Deep Panda, is one of several hacking groups that Western cybersecurity companies have accused of hacking into US and other countries’ networks and stealing government, defense and industrial documents.
The attack on the OPM computers, revealed this month, compromised the data of 4 million current and former federal employees, raising US suspicions that Chinese hackers were building huge databases that could be used to recruit spies.
China has denied any connection with such attacks and little is known about the identities of those involved in them. However, cybersecurity experts are starting to learn more about their methods.
Researchers have connected the OPM breach to an earlier attack on US healthcare insurer Anthem Inc, which has been blamed on Deep Panda.
Myers says his team has no evidence that Shell Crew were behind the OPM attack, but believes Shell Crew and Deep Panda are the same group. And they are no newcomers to cyberespionage.
CrowdStrike, the cybersecurity company which gave Deep Panda its name due to its perceived Chinese links, traces its activities to 2011, when it launched attacks on defense, energy and chemical industries in the US and Japan, but few have caught them in the act.
The CIA has a message for Chinese government officials worried about their place in Chinese President Xi Jinping’s (習近平) government: Come work with us. The agency released two Mandarin-language videos on social media on Thursday inviting disgruntled officials to contact the CIA. The recruitment videos posted on YouTube and X racked up more than 5 million views combined in their first day. The outreach comes as CIA Director John Ratcliffe has vowed to boost the agency’s use of intelligence from human sources and its focus on China, which has recently targeted US officials with its own espionage operations. The videos are “aimed at
STEADFAST FRIEND: The bills encourage increased Taiwan-US engagement and address China’s distortion of UN Resolution 2758 to isolate Taiwan internationally The Presidential Office yesterday thanked the US House of Representatives for unanimously passing two Taiwan-related bills highlighting its solid support for Taiwan’s democracy and global participation, and for deepening bilateral relations. One of the bills, the Taiwan Assurance Implementation Act, requires the US Department of State to periodically review its guidelines for engagement with Taiwan, and report to the US Congress on the guidelines and plans to lift self-imposed limitations on US-Taiwan engagement. The other bill is the Taiwan International Solidarity Act, which clarifies that UN Resolution 2758 does not address the issue of the representation of Taiwan or its people in
US Indo-Pacific Commander Admiral Samuel Paparo on Friday expressed concern over the rate at which China is diversifying its military exercises, the Financial Times (FT) reported on Saturday. “The rates of change on the depth and breadth of their exercises is the one non-linear effect that I’ve seen in the last year that wakes me up at night or keeps me up at night,” Paparo was quoted by FT as saying while attending the annual Sedona Forum at the McCain Institute in Arizona. Paparo also expressed concern over the speed with which China was expanding its military. While the US
SHIFT: Taiwan’s better-than-expected first-quarter GDP and signs of weakness in the US have driven global capital back to emerging markets, the central bank head said The central bank yesterday blamed market speculation for the steep rise in the local currency, and urged exporters and financial institutions to stay calm and stop panic sell-offs to avoid hurting their own profitability. The nation’s top monetary policymaker said that it would step in, if necessary, to maintain order and stability in the foreign exchange market. The remarks came as the NT dollar yesterday closed up NT$0.919 to NT$30.145 against the US dollar in Taipei trading, after rising as high as NT$29.59 in intraday trading. The local currency has surged 5.85 percent against the greenback over the past two sessions, central