U.S. Accuses Chinese Hackers of Targeting Critical Infrastructure in America


The United States imposed sanctions on Monday on Chinese hackers and accused them of working as a front for Beijing’s top spy agency, part of a broad effort to place malware in American electric grids, water systems and other critical infrastructure.

The sanctions were a major escalation of what has become an increasingly heated contest between the Biden administration and Beijing.

While there have been no cases so far in which the Chinese government has turned off essential services, American intelligence agencies have warned in recent months that the malware appeared to be intended for use if the United States were coming to the aid of Taiwan.

By turning off critical services to military bases, and to civilian populations, China would try, according to a series of intelligence findings, to turn Americans inward — worrying about their own supplies of electricity, food and water rather than assisting a distant island that Beijing claims as its own.

The sanctions were part of a joint effort between the United States and Britain to crack down on Chinese hacking into vital services. In announcing the new measures, the Treasury Department described malicious state-sponsored cyberactors as “one of the greatest and most persistent threats to U.S. national security.”

The sanctions were unveiled as the Justice Department announced charges against seven Chinese nationals accused of conspiracy to commit computer intrusions and wire fraud.

The hackers were part of a group known as Advanced Persistent Threat 31, or APT31, that has for the last 14 years targeted American companies, government and political officials, candidates and campaign personnel.

“This case serves as a reminder of the ends to which the Chinese government is willing to go to target and intimidate its critics, including launching malicious cyberoperations aimed at threatening the national security of the United States and our allies,” Merrick B. Garland, the attorney general, said in a statement.

According to the Justice Department, the hackers deployed more than 10,000 emails with hidden tracking links that could, if opened, compromise the electronic device of a recipient. Their operation targeted a Justice Department official, high-ranking White House officials and multiple U.S. senators.

The Treasury Department added Wuhan Xiaoruizhi Science and Technology Company to its sanctions list and described it as a “front company” for China’s ministry of state security, which ran the cyberespionage operation. The ministry has emerged as Beijing’s largest hacking operation, after a major investment by the Chinese government, according to American intelligence agencies.

The ministry — under the direct control of the Chinese leadership — is taking over for the People’s Liberation Army, which directed most of the espionage attacks on American companies, intended to steal corporate secrets or defense designs.

But Beijing’s strategy has now evolved, and its first goal appears to be finding a way to deter, or at least slow, a military effort by Washington to aid Taiwan if President Xi Jinping of China decided to try to take the island.

“The United States is focused on both disrupting the dangerous and irresponsible actions of malicious cyberactors as well as protecting our citizens and our critical infrastructure,” said Brian E. Nelson, the Treasury Department’s under secretary for terrorism and financial intelligence. The department also imposed sanctions on two Chinese nationals for their roles in cyberattacks.

While President Biden has never mentioned the threat in public, his aides have been intensely focused on an operation called “Volt Typhoon” that stretches back many years but has intensified since early last year. Over the past few months, the United States has been intensively working with American business that are crucial to American infrastructure, and even issued a detailed warning last week on how to detect Chinese intrusions into critical systems.

But the announcement on Monday went far beyond electric grids and water systems. It pointed to a defense contractor that manufactures flight simulators for the U.S. military, a Tennessee-based aerospace and defense contractor, and an Alabama-based aerospace and defense research corporation.

The sanctions on China come as the Biden administration has been trying to stabilize relations with Beijing, seeking areas of cooperation on combating the flow of fentanyl and fighting climate change. That effort began with Mr. Biden’s meeting with Mr. Xi in California late last year, in which he warned Mr. Xi about the intrusions into American infrastructure. Chinese officials have denied they were involved.

Still, the administration is trying to mix heightened pressure with continuing dialogue. Treasury Secretary Janet L. Yellen is expected to make her second trip to China in the coming months.


Source link

Leave a Comment