Pentagon says China using cyberattacks
U.S. gov't accuses country of trying to obtain sensitive information
The Pentagon has accused China of trying to extract sensitive information from U.S. government computers, the latest in a series of rhetorical skirmishes between the two countries on the issue of cyberattacks.
The frank assessment, made in an annual report to U.S. lawmakers on Chinese military capabilities, is the harshest and most detailed set of accusations made thus far by the Obama administration.
"In 2012, numerous computer systems around the world, including those owned by the U.S. government, continued to be targeted for intrusions, some of which appear to be attributable directly to the Chinese government and military," the report said.
The Pentagon said China is carrying out the attacks in an effort to extract information from "diplomatic, economic and defense industrial base sectors that support U.S. national defense programs." The intellectual property and data is likely being used to bolster China's own defense and high tech industries, the report said.
Foreign Ministry spokeswoman Hua Chunying said Tuesday that China is "firmly against any forms of cyberattacks." The government has in the past insisted that China is the victim of cyberattacks, most originating in the U.S.
The information haul is not limited to the military and related contractors, the Pentagon says. China is also seeking similar information from the private sector, often through more legitimate avenues.
"China continues to leverage foreign investments, commercial joint ventures, academic exchanges, the experience of repatriated Chinese students and researchers, and state sponsored industrial and technical espionage to increase the level of technologies and expertise available to support military research, development, and acquisition," the report said.
China is not the only country believed to be involved in cyberattacks. The existence of several other state-sponsored cyberweapons has also been reported in recent years, with names like Stuxnet, Duqu and Flame. The U.S. government is widely believed to have played a role in developing some of those viruses, with an eye toward containing Iran.
Yet China has drawn intense scrutiny in recent months after its military was linked by an American cybersecurity firm to one of the world's most prolific groups of computer hackers.
Virginia-based Mandiant said in February it had observed the group of hackers -- called the "comment crew" -- systematically steal hundreds of terabytes of data from at least 141 organizations across 20 industries worldwide since 2006.
Mandiant claims the activity can be traced to four networks near Shanghai -- with some operations taking place in a location that is also the headquarters of Unit 61398, a secret division of China's military.
The Mandiant report confirmed in dramatic and public fashion what many analysts had long suspected -- that China was engaging in cyberattacks on a significant scale -- and drew a response from President Obama.
"We have seen a steady ramping up of cybersecurity threats," Obama said. "We've made it very clear to China and some other state actors that, you know, we expect them to follow international norms and abide by international rules."