State-sponsored Chinese hackers have infiltrated critical US infrastructure networks, the US, its Western allies and Microsoft said on Wednesday, adding that similar espionage attacks could be occurring globally.
Microsoft highlighted Guam, a US territory in the Pacific Ocean with a vital military outpost, as one of the targets, but said “malicious” activity had also been detected elsewhere in the US.
The stealthy attack — carried out by a China-sponsored actor dubbed “Volt Typhoon” since mid-2021 — enabled long-term espionage and was likely aimed at hampering the US if there was conflict in the region, it said.
Photo: AP
“Microsoft assesses with moderate confidence that this Volt Typhoon campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises,” the statement said.
“In this campaign, the affected organizations span the communications, manufacturing, utility, transportation, construction, maritime, government, information technology and education sectors,” it said.
Microsoft’s statement coincided with an advisory released by US, Australian, Canadian, New Zealand and British authorities.
They said a “state-sponsored cyber actor” from China was behind Volt Typhoon, and that the hacking was likely occurring globally.
“This activity affects networks across US critical infrastructure sectors, and the authoring agencies believe the actor could apply the same techniques against these and other sectors worldwide,” the advisory said.
The US and its allies said the activities involved “living off the land” tactics, which take advantage of built-in network tools to blend in with normal Windows systems.
It warned that the hacking could incorporate legitimate system administration commands that appear “benign.”
Volt Typhoon tried to blend into normal network activity by routing traffic through compromised small office and home office network equipment, including routers, firewalls and virtual private network hardware, Microsoft said.
“They have also been observed using custom versions of open-source tools,” Microsoft said.
Microsoft and the security agencies released guidelines for organizations to detect and counter the hacking.
“It’s what I would term a low and slow cyberactivity,” said Alastair McGibbon, chief strategy officer at Australia’s CyberCX and a former head of the Australian Cyber Security Centre.
“When you think about something that can really cause catastrophic harm, it is someone with intent who takes time to get into systems,” he said.
Once inside, the cyberattackers can steal information, he said.
While China and Russia have long targeted critical infrastructure, Volt Typhoon offered new insights into Chinese hacking, said John Hultquist, chief analyst at US cybersecurity company Mandiant.
“Chinese cyberthreat actors are unique among their peers in that they have not regularly resorted to destructive and disruptive cyberattacks,” he said.
“As a result, their capability is quite opaque. This disclosure is a rare opportunity to investigate and prepare for this threat,” he said.
The Central Weather Bureau could issue a sea alert for Super Typhoon Mawar, as it is forecast to turn north and come closest to Taiwan from Tuesday to Wednesday next week. Mawar was downgraded from a super typhoon to a typhoon after sweeping across Guam on Wednesday night, knocking down trees and leaving much of the US territory without power. Many residents of Guam yesterday remained without power and utilities after Mawar tore through the remote US Pacific territory the previous night, ripping roofs off homes, flipping vehicles and shredding trees. There were no immediate reports of deaths and injuries, but the
ADJUSTMENTS: Over the next five years, every year except 2026 would have only one makeup workday to compensate for national holidays, the government said The Executive Yuan (EY) yesterday announced the official workday calendar for next year, which includes one makeup day and four holidays with more than three days off. It also announced new standards for makeup days in the event of consecutive holidays. The Directorate-General of Personnel Administration cited the importance of the Lunar New Year and Tomb Sweeping holidays to the public as its reason to mandate flexible off-days. The 115 total off-days dovetail with dates that international financial markets are closed, minimizing the effects of state holidays on stock and currency exchange trading, it said. Over the next five years, only the calendar for
EMBRACE CHANGE: Jensen Huang told NTU graduates that instead of worrying about AI itself, they should worry that people with expertise in AI would be taking their jobs Artificial intelligence (AI) is redefining the computer industry, and Taiwanese companies could play a major role in replacing the world’s traditional computers as they are the foundation of the industry, Nvidia Corp cofounder and CEO Jensen Huang (黃仁勳) said in Taipei yesterday. Huang made the remarks while giving the keynote speech at National Taiwan University’s (NTU) commencement ceremony. AI has created immense opportunities, and versatile companies can be expected to take advantage and boost their position, while less flexible firms would perish, he said. “In every way, this is a rebirth of the computer industry and a golden opportunity for the companies of
‘ARCHAIC’: An interpretation of a law that considered Chinese as Taiwanese nationals was scrapped after the death of a Chinese in Kaohsiung led to state reparations An administrative mandate to consider Chinese as Taiwanese citizens was outdated, Premier Chen Chien-jen (陳建仁) said yesterday, a day after the Executive Yuan ordered that agencies disregard the 30-year-old interpretation. Chen made the remarks at an event held by the Environmental Protection Administration in Taipei following changes to the administrative mandate concerning the Act Governing Relations Between the People of the Taiwan Area and the Mainland Area (臺灣地區與大陸地區人民關係條例). The previous interpretation of the law was archaic and contrary to the workings of laws and regulations, he said, adding that the order was made to avoid unnecessary problems created by the mandate. The Mainland
RSS