China Tech Threat Update
"China appears to be enhancing their technological threat capabilities through various channels ..."
A recent investigation, “Operation Cisco Raider” – a cooperative effort between the U.S. Immigration and Customs enforcement, and Customs and Border Protection, the FBI and U.S. Attorneys Offices - has led to the seizures of counterfeit Cisco Systems products valued at $76 million entering the U.S. market.
Counterfeit Cisco routers, switches, interface cards, and network hardware pose a risk to U.S. companies in terms of infiltration through hacking and malfunction, a point made also by U.S. Attorney –General Alice Fisher:
"Counterfeit network hardware entering the marketplace raises significant public safety concerns, and must be stopped. This initiative shows that through collaboration among law enforcement agencies and prosecutors worldwide, we can achieve dramatic enforcement results and protect public safety … It is critically important that network administrators in both private sector and government perform due diligence in order to prevent counterfeit hardware from being installed on their networks."
Earlier, the FBI’s Cyber Investigations Division presented newly unclassified information that illustrated the extent of counterfeit computer and network hardware. The FBI fears Chinese Hackers and/or Government Agents are developing a back door into U.S. Government & Military Computer Networks:
“Some months ago, my contacts in the defense industry had alerted me to a startling development that has escalated to the point of near-panick in nearly all corners of Government security and IT infrastructure. The very-real concern, being investigated by the FBI, is that either the Chinese government or Chinese hackers (or both) have had the benefit of undetectable back-doors into highly secure government and military computer networks for months, perhaps years. The cause: a high-number of counterfeit Cisco routers and switches installed in nearly all government networks that experienced upgrades and/or new units within the past 18 months.” more >>
Of greater concern are comments made by Samuel King from the University of Illinois. A computer science expert specializing in Security, Operating systems, Experimental software systems, and Virtual Machines, he recently noted that equipment shipped from Shenzhen City might have been sold to gain access to sensitive U.S. military data and has made a good case for malicious hardware being the next hackers’ tool of choice.
"Malicious hardware is more problematic because it is more difficult to detect; China is already using an early, and simple, version of malicious hardware in its massive military and industrial espionage campaign against Western countries and companies. We wrote last week about how Chinese companies, controlled by the Chinese military, have manufactured counterfeit Cisco routers and switches and offered them at exceedingly low prices to U.S. vendors who had contracts to upgrade or replace U.S. government IT systems." more >>
China also poses a growing tech threat through a strategy of using informal spy networks to acquire sensitive technology with commercial and military applications that can eventually erode U.S. economic and military strength.
"China is stepping up its overt and covert efforts to gather intelligence and technology in the United States, and the activities have boosted Beijing's plans to rapidly produce advanced-weapons systems, reports The Washington Times in part two of its two-part series on China's growing threat to US security. China's spies use as many as 3,200 front companies -- many run by groups linked to the Chinese military -- that are set up to covertly obtain information, equipment and technology, US officials say. Additionally, the Chinese use hundreds of thousands of Chinese visitors, students and other nonprofessional spies to gather valuable data, most of it considered "open source," or unclassified information." more >>
Infiltration
We have also seen instances of unauthorized access of the highest order. Just last month, Stephen Brown wrote an interesting piece at FrontPage that detailed the infiltration of computer networks by Chinese hackers on the offices of two Republican Congressman.
“Cyber warfare officially arrived on Capitol Hill last week. Two Republican congressmen, Rep. Frank Wolf of Virginia and Rep. Christopher Smith of New Jersey, went public last Wednesday with the news that in 2006 and 2007 their office computer networks had been breached by Chinese hackers. The cyber raiders were not looking for sensitive military or economic data. Instead, they apparently tried to steal political information about Chinese dissidents. “My suspicion is that I was targeted by Chinese sources because of my long history of speaking out about China’s abysmal human rights record,” Wolf told the Washington Times. Both congressmen said the attacks were made against aides who “…worked specifically on China and human rights issues ... China’s largest cyber-raid in the United States occurred in 2004. The assault was so massive that American security authorities gave it a code name, “Titan Rain.” Computers in several defense and space installations were targeted and thousands of unclassified documents, both military and industrial, were stolen. Fortunately, classified military information is not directly connected to the internet; but data found in those unclassified networks can also be of a sensitive nature. Equally brazen was a 2007 cyber attack on Pentagon computers. That attack saw Secretary of Defense Robert Gates’ computer system compromised. The perpetrator in this case was believed to have been the People’s Liberation Army." more >>
Whether the China tech threat constitutes real danger to U.S., security is still a matter for debate. The fear is that the current Presidential race in conjunction with Iraq, Afghanistan, and Iran – The War on Terror – is diverting attention away from some very real instances of security breaches. One thing is certain, China appears to be enhancing their technological threat capabilities through various channels; something that should raise eyebrows and make even the most cynical security experts worry.
See also:
Taskforce seizes $76 Million in counterfeit Cisco network hardware
Cyberwarfare: The next challenge




