Posted by: mulrickillion | November 6, 2011

Chemical, military firms hacked: report

AP,  Nov 2, 2011 —

‘POISONIVY’: A Symantec report said the attacks appeared to be industrial spying and were traced to a computer system owned by a Chinese man in Hebei Province

Cyberattacks traced to China targeted at least 48 chemical and military-related companies in an effort to steal technical secrets, a US computer security company said yesterday, adding to complaints about pervasive Internet crime linked to China.

The targets included 29 chemical companies and 19 others that make advanced materials used by the military, California-based Symantec Corp said in a report. It said the group included multiple Fortune 100 companies, but did not identify them or say where they were located.

“The purpose of the attacks appears to be industrial espionage, collecting intellectual property for competitive advantage,” the report said.

Security experts say China is a center for Internet crime. Attacks against governments, companies and human rights groups have been traced to the country, though finding the precise source is nearly impossible. China’s military is a leader in cyberwarfare research, but the government has rejected allegations of cyberspying and says it is also a target.

The latest attacks occurred between late July and September and used e-mails sent to companies to plant software dubbed “PoisonIvy” in their computers, Symantec said.

It said the same hackers were also involved in attacks earlier this year on human rights groups and auto companies.

Symantec said it traced the attacks to a computer system owned by a Chinese man in his 20s in the central province of Hebei. It said that when contacted, the man provided a contact who would perform “hacking for hire.”

Symantec said it could not determine whether the Chinese man was a lone attacker, whether he had a direct or indirect role or whether he hacked the targets for someone else. It called him Covert Grove based on a translation of his Chinese name.

The US and China have accused each other of being involved in industrial espionage.

Security consultants say the high skill level of earlier attacks traced to China suggests its military or other government agencies might be stealing technology and trade secrets to help state companies.

The chairman of the US House of Representatives Intelligence Committee, Representative Mike Rogers, said last month that Chinese efforts to steal US technology over the Internet had reached an “intolerable level.” He called on the US and other governments to pressure Beijing to stop.

Another security firm, McAfee Inc, said in August it had found a five-year-long hacking campaign that it called Operation Shady Rat against more than 70 governments, international institutions, corporations and think tanks.

In February, McAfee said hackers operating from China stole information from oil firms in the US, Taiwan, Greece and Kazakhstan about operations, financing and bidding for oil fields.

Thousands of Chinese computer enthusiasts belong to hacker clubs and experts say some are supported by the military to develop a pool of possible recruits.

Experts say military-trained civilians might also work as contractors for firms that want to steal technology or business secrets from rivals.

China has the world’s biggest population of Internet users, with more than 450 million people online, and the government promotes Web use for business and education. However, experts say security for many computers in China is so poor that they are vulnerable to being taken over and used to hide the source of attacks from elsewhere.

Chemical, military firms hacked: report – Taipei Times


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s


%d bloggers like this: