Chinese military spying on United States

[Laughing Out Loud]

WASHINGTON—U.S. intelligence agencies have pinpointed many of the Chinese groups responsible for cyberspying in the U.S., and most are sponsored by the Chinese military, according to people who have been briefed on the investigation.



Armed with this information, the U.S. has begun to lay the groundwork to confront China more directly about cyberspying. Two weeks ago, U.S. officials met with Chinese counterparts and warned China about the diplomatic consequences of economic spying, according to one person familiar with the meeting.



The Chinese cyberspying campaign stems largely from a dozen groups connected to China's People's Liberation Army and a half-dozen nonmilitary groups connected to organizations like universities, said those who were briefed on the investigation. Two other groups play a significant role, though investigators haven't determined whether they are connected to the military.



In many cases, the National Security Agency has determined the identities of individuals working in these groups, which is a critical development that provides the U.S. the option of confronting the Chinese government more directly about the activity or responding with a counterattack, according to former officials briefed on the effort.



"It's actually a small number of groups that do most of the PLA's dirty work," said James Lewis, a cybersecurity specialist at the Center for Strategic and International Studies who frequently advises the Obama administration. "NSA is pretty confident of their ability to attribute [cyberespionage] to this set of actors."



In early November, the U.S. chief of counterintelligence issued a report that was unusually blunt in accusing China of being the world's "most active and persistent" perpetrator of economic spying. Lawmakers have also become more vocal in calling out China for its widening campaign of cyberespionage.



Still, diplomatic considerations may limit the U.S. interest in taking a more confrontational approach because some U.S. officials are wary of angering China, the largest holder of U.S. debt.



Chinese Foreign Ministry spokesman Liu Weimin said that Chinese law "clearly prohibits hacking" and that the Chinese government "cracks down on such behavior and actively participates in international cooperation."



"Accusations that China participates in such hacking, or that the Chinese government is behind it, are totally ungrounded," he said.



Chinese officials regularly dispute U.S. allegations of cyberspying, saying they are the victims, not the perpetrators, of cybercrime and cyberespionage. An NSA spokeswoman declined to comment.



Identifying adversaries has been difficult because it is easy to fake identities and locations in cyberspace. An inability to tie cyberspying activities with precision to a certain actor has in the past limited the U.S.'s ability to respond because it's hard to retaliate or confront an unidentified adversary.



The U.S. government, led by the National Security Agency, has tracked the growing Chinese cyberspying campaign against the U.S. for decades. Past government efforts have had exotic names like "Titan Rain," and "Byzantine Hades."



More recently, NSA and other intelligence agencies have made significant advances in attributing cyberattacks to specific sources—mostly in China's People's Liberation Army—by combining cyberforensics with ongoing intelligence collection through electronic and human spying, Mr. Lewis said.



The U.S. investigation of China's activities is the latest round of spy-versus-spy in cyberspace.



The activity breaks down into cyberspying efforts by 20 groups with different attack styles that are responsible for most of the cybertheft of U.S. secrets, said the people briefed on the investigation. U.S. intelligence officials have given different classified code names to each group.



U.S. intelligence officials can identify different groups based on a variety of indicators. Those characteristics include the type of cyberattack software they use, different Internet addresses they employ when stealing data, and how attacks are carried out against different targets. In addition to U.S. government agencies, major targets of these groups include U.S. defense contractors, according to former officials.



Collectively, these groups employ hundreds of people, according to former officials briefed on the effort. That number is believed to be small compared to the estimated 30,000 to 40,000 censors the Chinese government is believed to employ to patrol the Internet.



The Chinese government is believed to have been behind a number of recent major cyberbreak-ins, including multiple hacks of Google Inc. and the EMC Corp.'s RSA unit, which makes the numerical tokens used by millions of corporate employees to access their network.



A cyberattack revealed this year on Lockheed Martin Corp. is also believed to have been traced to China, and the Chinese are believed to have been responsible for an infiltration a few years ago of the Pentagon's Joint Strike Fighter weapons program, which is also managed by Lockheed.



The counterintelligence report released last month predicted that China's espionage efforts will continue to grow.

[Laughing Out Loud]

Intelligence Tested

U.S. has long suspected China in cyberattacks



May 1999: The U.S. bombing of the Chinese Embassy in Belgrade leads to a series of defacements of U.S. government websites by Chinese hackers.



April 2001: The collision of a U.S. Navy reconnaissance plane and a Chinese F-8 fighter sparks denial-of-service attacks and Web defacements against U.S. sites.



November 2006: Chinese hackers attack the U.S. Naval War College computer infrastructure.



October 2007: China is suspected as the source of a malicious email targeting 1,100 employees at the Oak Ridge National nuclear weapons lab.



January 2010: Google says Chinese hackers breached its systems. Other companies attacked include Juniper Networks and Adobe Systems.



February 2011: Computer security firm McAfee says in a report that it found evidence that Chinese hackers attacked five Western oil firms.



March: EMC Corp's security division, RSA says its systems were infiltrated using 'phishing' emails. Chinese hackers strongly suspected.



May:Defense contractor Lockheed Martin acknowledges its computer systems were hacked. Chinese hackers are reportedly suspected.



Nov. 4: U.S. chief of counterintelligence issues a report calling the Chinese 'the world's more active and persistent perpetrators of economic espionage.'



Mid-November: The U.S.-China Economic and Security Review Commission reports that on at least two occasions hackers had taken control over U.S. satellites, and the report suggested the perpetrators' activities were consistent with stated Chinese military ambitions.



WSJ research

[Anonymous]

The People`s Liberation Army spying on America does not surprise me at all.

[Anonymous]

I never knew the lotus flower was related to the Oak tree until now. ;)

[Obvious Li]

the chinese are cyber attacking canadian facilities as well....not real happy about that......govt. and industry needs to step up and shut these fuckers down

[Zetsu]

Lol frankly speaking all military spy on each other.

[Anonymous]

the chinese are cyber attacking canadian facilities as well....not real happy about that......govt. and industry needs to step up and shut these fuckers down

Even the suggesstion of this angers China Obvious Li..



How do we broach this issue without getting them making them so angry they punish Canadians wanting to do business with China?

[Obvious Li]

the chinese are cyber attacking canadian facilities as well....not real happy about that......govt. and industry needs to step up and shut these fuckers down

Even the suggesstion of this angers China Obvious Li..



How do we broach this issue without getting them making them so angry they punish Canadians wanting to do business with China?

Tru dat, but China is a different kinda state and it's leaders are exceptionally thin-skinned. Any mention of these issues have to be handled in a way acceptable to Beijing, ie behind closed doors and with no independent media present.



I do not like the way Beijing demands ass kissing, but the alternative is worse. Let's not jeopardize trade/jobs/economic growth for the sake of principle.

Hmmmmm..i think sooner or later someone is going to have the courage to tell these pirates that if they want our money they have to act civilized....too many countries walking on eggshells around these issues......either that or hit them back hard through continuous cyber hacking of their govt and industry....

[Obvious Li]

ya i hear you...but it pisses me off that they are allowed to infiltrate our systems down to even controlling our streetlights, pipeline switching, elevator operation etc.....who even knows what kind of personal and financial data they now have on companies, banks and individuals...i think these types of hack have to be responded to regardless of who gets pissed off.....

[Frost]

I wonder why they are making a big deal of this, it's been known for decades now.

The info has even been given freely under the table but the likes of Bill Clinton, and others like bob Dole, not to mention Obama the puppet of George Soros that works all sides.

[Anonymous]

I wonder why they are making a big deal of this, it's been known for decades now.

The info has even been given freely under the table but the likes of Bill Clinton, and others like bob Dole, not to mention Obama the puppet of George Soros that works all sides.

China has probably stepped up the spying as their technology and wealth have grown.

[Frost]

I'm sure, but the US, and other should have been ready fo that, they knew.

[Anonymous]

I'm sure, but the US, and other should have been ready fo that, they knew.

The West and Japan didn't really prepare for China's growing power.

[Frost]

I know, and did they do that intentionally here, maybe.

Japan is wanting to change it's constitution over them so they can raise an army now to build their power.

Some in Japan saw it years ago, but was shot down in their government .

[Frost]

Since the 80s when they peeked, but they started contracting out of country to keep up, and went bust when economy's changed.

Same here, we did it, and Europe also.