{"id":71245,"date":"2013-09-19T19:42:59","date_gmt":"2013-09-19T18:42:59","guid":{"rendered":"http:\/\/rinf.com\/alt-news\/breaking-news\/hackers-for-hire-chinese-group-accused-of-economic-espionage-against-us-companies\/71245\/"},"modified":"2013-09-19T19:42:59","modified_gmt":"2013-09-19T18:42:59","slug":"hackers-for-hire-chinese-group-accused-of-economic-espionage-against-us-companies","status":"publish","type":"post","link":"http:\/\/rinf.com\/alt-news\/breaking-news\/hackers-for-hire-chinese-group-accused-of-economic-espionage-against-us-companies\/","title":{"rendered":"Hackers-for-hire: Chinese group accused of economic espionage against US companies"},"content":{"rendered":"
<\/a><\/div>\n
\n
\n\t\t\t\t\t\t
\n
\n Published time: September 19, 2013 18:40 <\/span>
\n <\/p><\/div>\n
\n

Reuters \/ Pichi Chuang <\/p>\n<\/p><\/div>\n<\/p><\/div>\n

Computer security experts at Symantec say they’ve identified an elite group of Chinese hackers who have targeted the systems of Google, Adobe and other big name United States-based companies.<\/p>\n

\n A 28-page report released by the Silicon Valley-based security
\n firm this week accused the group “Hidden Lynx” with an array of
\n high-profile hacks that have targeted major technology companies
\n and government contractors alike since at least 2009.\n<\/p>\n

\n Symantec has blamed the group for Operation Aurora, a 2009
\n cyber-attack that set its sights on dozens of victims, including
\n Yahoo, Northrup Grumman, Dow Chemical and even Symantec itself.
\n Google was the first company to break news of the attack early
\n the next year and admitted that the hackers attempted to breach
\n Gmail and read communications between human rights activists.\n<\/p>\n

\n According to Symantec, the group involved in the exploits
\n consists of 50 to 100 professional “hackers for hire<\/i>,” and
\n is among the most advanced troops of its kind.\n<\/p>\n

\n “This group has a hunger and drive that surpass other
\n well-known groups<\/i>,” Symantec acknowledged in a blog post
\n published on Tuesday, and characterized the unit as demonstrating
\n vast technical prowess, agility, organization, patience and
\n “sheer resourcefulness<\/i>.”\n<\/p>\n

\n “These attributes are shown by the relentless campaigns waged
\n against multiple concurrent targets over a sustained period of
\n time<\/i>,” Symantec said.\n<\/p>\n

\n But whereas other recent reports identified other powerful
\n Chinese hacking groups tied to the country’s government, Symantec
\n failed to directly accuse the computer pros as being state
\n agents.\n<\/p>\n

\n “Given the breadth and number of targets and regions involved,
\n we infer that this group is most likely a professional
\n hacker-for-hire operation that are contracted by clients to
\n provide information<\/i>,” Symantec said. “They steal on
\n demand, whatever their clients are interested in, hence the wide
\n variety and range of targets<\/i>.”\n<\/p>\n

\n Among those targets is Bit9, the self-proclaimed “leader in a
\n new generation of endpoint and server security based on real-time
\n visibility and malware protection<\/i>.” The United States
\n government is just one of the clients of Bit9, a firm that
\n analyzes software to make sure it’s secure enough to run on
\n certain systems. It was breached in June 2012 by a group now
\n identified by Symantec as Hidden Lynx.\n<\/p>\n

\n “Since November 2011, hundreds of organizations worldwide have
\n been targeted<\/i>” by the group, Symantec said in the report.
\n More than half of those targets are US-based, and around a
\n quarter are linked to the financial sector.\n<\/p>\n

\n “There is almost certainly a financial motivation behind these
\n attacks<\/i>,” Symantec said, accusing Hidden Lynx of mass
\n corporate espionage as well as attacks against nation-states and
\n governmental contractors alike.\n<\/p>\n

\n Speaking to Reuters, the chief technologist at competing security
\n firm CrowdStrike said he thinks the group has worked solely for
\n the Chinese government and state-owned enterprises, despite
\n Symantec’s falling short of make such accusations.\n<\/p>\n

\n “Whether they are formally a military unit or a defense
\n contractor, that is unknown<\/i>,” CrowdStrike’s Dmitri
\n Alperovitch<\/span> told the newswire.\n<\/p>\n

\n Weighing in with the Wall Street Journal,
\n Alperovitch<\/span> added, “There is no question they’re
\n working on behalf of the Chinese government<\/i>.”\n<\/p>\n

\n Earlier this year, Virginia-based security firm Mandiant released
\n a report<\/a> accusing a group directly tied to the Chinese
\n government with comprising the systems of over 140 companies,
\n including many US-based corporations, such as Coca-Cola.\n<\/p>\n

\n Comparing Hidden Lynx with other Chinese hacking firms,
\n Symantec’s Samir Kapuria, the company’s vice president of
\n business strategy and secure intelligence, told ABC News,
\n “These guys are a lot more precise and surgical<\/i>.”<\/span>\n<\/p>\n

\n “The tactics and tools that they employ are things that they
\n like to keep hidden… This is when there’s a specific mission in
\n mind: ‘How do we infiltrate the supply chain of our ultimate
\n target? How do we tailor some specific attack that allows us to
\n go under the radar<\/i>?'” he said.\n<\/p>\n

\n In the official report, embedded below, Symantec said the group
\n is highly organized and “can gain advanced access to zero-day
\n vulnerabilities<\/i>.” RT reported earlier this week that the US’
\n National Security Agency entered a contract last year with a
\n French hacking firm named Vupen<\/a> that sells subscriptions to a service that
\n provides clients, including major governments, with details about
\n these vulnerabilities, named as such because manufacturers have
\n no time to patch up security flaws.\n<\/p>\n

\n “Major software vendors such as Microsoft and Adobe usually
\n take 6 to 9 months to release a security patch for a critical
\n vulnerability affecting their products, and this long delay
\n between the discovery of a vulnerability and the release of a
\n patch creates a window of exposure during which criminals
\n can rediscover a previously reported but unpatched vulnerability,
\n and target any organization running the vulnerable software<\/i>,”
\n Vupen acknowledged on its website.\n<\/p>\n

Copyright: RT<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Published time: September 19, 2013 18:40 Reuters \/ Pichi Chuang Computer security experts at Symantec say they’ve identified an elite group of Chinese hackers who have targeted the systems of Google, Adobe and other big name United States-based companies. A 28-page report released by the Silicon Valley-based security firm this week accused the group “Hidden […]<\/p>\n","protected":false},"author":1,"featured_media":71246,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[487],"tags":[],"class_list":{"0":"post-71245","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-breaking-news"},"_links":{"self":[{"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/posts\/71245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/comments?post=71245"}],"version-history":[{"count":0,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/posts\/71245\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/media\/71246"}],"wp:attachment":[{"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/media?parent=71245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/categories?post=71245"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/tags?post=71245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}