FBI says: Commie China has 180K Cyber Soldiers Attacking the US

from:

www.thedailybeast.com
credit to: Gerald Posner

While Google weighs exiting China, a classified FBI report says that country has already developed a massive cyber army attacking the U.S. with “WMD-like” destruction capabilities.

A classified FBI report indicates that China has secretly developed an army of 180,000 cyberspies that “poses the largest single threat to the United States for cyberterrorism and has the potential to destroy vital infrastructure, interrupt banking and commerce, and compromise sensitive military and defense databases."

These spies are already launching 90,000 attacks a year just against U.S. Defense Department computers, according to a senior FBI analyst familiar with the contents of the report, making news Tuesday that the Chinese government may have hacked the email accountings of human-rights activists, prompting Google to consider withdrawing from that country, seem like child’s play.

The FBI report estimates that the Chinese Army has developed a network of over 30,000 Chinese military cyberspies, plus 150,000 private-sector computer experts, whose mission is to steal American military and technological secrets.

Cyber warfare is part of every developed country's 21st century **************. Although no U.S. official will admit it, the Pentagon, CIA, and NSA regularly probe and try to hack into China's military and industrial computer networks to obtain the information that years ago were brought back by the James Bonds of spy services.

The U.S., and many of our European allies, try to find ways to wreck some havoc in the Chinese computer grid if a conflict ever takes place. The difference is that the Chinese are better than anyone else and lead the way in technological breakthroughs for the cyber battlefield.

The FBI report concludes that a massive Chinese cyberattack could “be in the magnitude of a weapon of mass destruction," says the analyst, who requested anonymity because he was not authorized to speak about it, adding that it would do substantial damage to the American economy, telecommunications, electric power grid, and military preparedness.

The FBI report estimates that since 2003, the Chinese Army has specifically developed a network of over 30,000 Chinese military cyberspies, plus more than 150,000 private-sector computer experts, whose mission is to steal American military and technological secrets and cause mischief in government and financial services.

China’s goal, says the FBI report, is to have the world’s premier “informationized armed forces” by 2020. According to the bureau’s classified information, the Chinese hackers are adept at implanting malicious computer code, and in 2009 companies in diverse industries such as oil and gas, banking, aerospace, and telecommunications encountered costly and at times debilitating problems with Chinese-implanted “malware.” The FBI analyst would not name the affected companies.

One of China’s most effective weapons, according to the FBI report, is a continuation of what Pentagon security investigators originally dubbed Titan Rain; it is a Chinese scanner program that probes national defense and high-tech industrial computer networks thousands of times a minute looking for vulnerabilities.

The Chinese military hackers, the FBI analyst told me, enter without any keystroke errors, leave no digital fingerprints, and create a clean backdoor exit in under 20 minutes, feats considered capable only for a military or civilian spy agency of only a few governments.

These attacks are proliferating. The FBI report lays out the identifiable attacks originating from China just on the Defense Department computers; they increased from 44,000 in 2007 to 55,000 in 2008, and topped 90,000 last year. “They probe, they test our responses, as quick as we make changes and fix vulnerabilities, they are moving a step ahead,” the analyst told me.

The Chinese hackers aren’t after credit-card numbers or bank accounts or looking to steal private identities. Instead, they are hunting for information. Although the barrage of attacks may at times appear random, the FBI report concludes that it is part of a strategy to fully flush out U.S. military telecommunications and to better understand—and to attempt to intercept—intelligence being gathered by American spy agencies, particularly the National Security Agency.

“It’s the great irony of the Information Age that the very technologies that empower us to create and to build also empower those who would disrupt and destroy,” President Obama said last May when he announced a new White House office dedicated to protecting the nation’s computer systems.

The Pentagon followed shortly after with a new military cyberspace command. In his remarks, the president said that, “In today’s world, acts of terror could come not only from a few extremists in suicide vests but from a few keystrokes of a computer.” And he admitted, “We’re not as prepared as we should be, as a government or as a country.”

China’s Ministry of Public Security has thousands of so-called Information Warfare Militia Units that effectively monitor all domestic Internet traffic of the country’s 140 million 'Net users. It’s this internal program that may have affected Google. On Tuesday, Google said it had detected a “highly sophisticated and targeted attack on our corporate infrastructure originating from China.” While Google did not specifically accuse the Chinese government, it said it was “no longer willing to continue censoring our results” on its Chinese search engine, as the government requires. Thus, it may need to withdraw from its largest potential market.

The private-sector issues affect government security. As a precondition to doing business in China, several years ago Microsoft was required to provide the government the source codes for the company’s Office software. The Chinese State Planning Commission contended that Microsoft's Windows operating system was a secret tool of the U.S. government and demanded Microsoft instruct Chinese software engineers on inserting their own software into Window's applications.

That gave the Chinese Army’s cyberwarfare department what computer hackers dub a “skeleton key,” allowing them access to almost every networked private business, military, and government computer in the U.S. Among the Chinese Army-backed Microsoft attacks, the FBI report includes successful forays against computer systems at the State Department, Commerce Department, the FBI, and the Naval War College, among others.

Some Chinese attacks plant embedded covert programs into government networks, searching for classified files and then automatically forwarding them by email to China. Using sophisticated “rootkit” programs to hide their presence, China’s hackers are “simply the most sophisticated,” says the senior FBI analyst. Homeland Security’s $1.8 billion computer network was penetrated by Chinese cyberwarriors in 2007, and an unknown amount of information was copied to a secure Chinese Web site.

Even the Pentagon was breached in 2007 and again in early 2009, despite what it considered foolproof Titan Rain security patches. The 2009 intrusion was particularly worrisome since the Chinese managed to get inside the Pentagon's $300 billion Joint Strike Fighter project—the Defense Department's costliest weapons program ever—according to a government official familiar with the attack who spoke to The Daily Beast on the condition of anonymity.

The cyber intruders copied several terabytes of data about the design and electronics systems, information that might make it easier to defend against the craft.

The FBI report concludes that many of the attacks identified as being from China might be part of Beijing’s plan to occasionally let its cyberspies be unmasked in order to give American and other Western counties a false sense of security. “There is no telling how many breaches there are that we haven’t yet picked up,” the FBI analyst told me. Most American government agencies have stopped buying Chinese hardware from Lenovo (the Chinese firm that acquired IBM's personal-computer division in 2005) and any software from the mainland.

But China is manufacturing microchips for dozens of major international companies, and those chips could hold viruses set to activate when used in a computer network. Chips employed in military applications could be designed to reverse engineer the weapon’s design and provide the information to Chinese spies. China’s microchip output is almost doubling every two years, and chip giant Intel has opened a multibillion-dollar plant in Dalian, China.

The FBI report’s grim conclusion: China sees its cyberwarriors as a critical component of its asymmetric warfare capability and the U.S. government should publicly identify China as an “ongoing intelligence risk.” The Chinese Embassy says that the country "opposes and forbids all forms of cyber crimes" and that charges of its cyber warrior program are remnants of “a Cold War mentality" and intended only “to fan up China threat sensations."

“Without confronting it as a major threat,” the FBI analyst told me, “companies like Google go to do business there incorrectly assuming they face no greater risk from Chinese penetrations than they face from any other country. It’s just not true. There’s no more imminent cyberthreat than the one posed by China.”

Somali pirates attack French military flagship

NAIROBI (AFP) – Somali pirates attempted to storm the French navy's 18,000 tonne flagship in the Indian Ocean after mistaking it for a cargo vessel, the French military said on Wednesday.

The crew of La Somme, a 160-metre (525-foot) command vessel and fuel tanker, easily saw off the brazen night-time assault by lightly armed fighters on two lightweight skiffs and captured five pirates, a spokesman said.

"The pirates, who because of the darkness took the French ship for a commercial vessel, were on board two vessels and opened fire with Kalashnikovs," Admiral Christophe Prazuck said in Paris.

La Somme is the French command vessel in the Indian Ocean, overseeing French air, sea and land forces fighting Somali pirates and hunting terrorists under the banner of the US-led Operation Enduring Freedom.

Officers on the ship have directed commando operations to free French hostages in the hands of Somali pirates.

The pirates tried to flee when they realised their mistake but were pursued by French forces who, after an hour-long chase, caught one of the skiffs, Prazuck said.

On it they found five men but no weapons, water or food as the pirates had apparently thrown all of the boat's contents overboard, the spokesman said.

A Western official at sea in the area, speaking to AFP on condition of anonymity, said that there had been an exchange of fire between the warship and the pirate launches.

"One of the skiffs managed to get away in the night because La Somme was busy with the first pirate boat," he said.

"Despite the arrival of other vessels, they haven't yet managed to find the second boat," he said, adding that many warships in the area were busy hunting another group which attacked a cargo ship off the Seychelles on Sunday.

The world's naval powers have deployed dozens of warships to the lawless waters off Somalia over the past year to curb attacks by pirates in one of the world's busiest maritime trade routes.

La Somme was operating 250 nautical miles (460 kilometres) off the Somali coast, on its way to resupply fuel to frigates patrolling shipping lanes as part of the European Union's Operation Atalanta anti-piracy mission.

This was not the first time that Somali pirates have mistakenly attacked a French naval vessel. Several pirates were captured in May when they attempted to board a frigate in the area.

Somalia has had no proper government since it plunged into lawlessness after President Mohamed Siad Barre was overthrown in 1991.

The country is riven by factional fighting and pirate gangs operate freely from several ports along its Indian Ocean and Gulf of Aden coasts.

According to the environmental watchdog Ecoterra International, at least 163 attacks have been carried out by Somali pirates since the start of 2009 alone, 47 of them successful hijackings.

Last year, more than 130 merchant ships were attacked, an increase of more than 200 percent on 2007, according to the International Maritime Bureau's Piracy Reporting Centre in Kuala Lumpur.

Pirates have in recent weeks resumed attacks with the end of the monsoon season. Last week Somali gunmen captured Spanish fishing boat The Alakrana with 36 crew members in the Indian Ocean.

The US Maritime Administration warned last month that the end of the monsoon season was likely to bring an increase in piracy off Somalia and urged shipping companies to be vigilant.

Calmer waters allow pirates, who often operate in small fibreglass skiffs towed out to sea by captured fishing vessels, to hijack freighters, trawlers and private yachts. Cruise vessels have also been attacked.