China accused of cyber-attack on Microsoft Exchange servers

Monday, 19 July 2021 - 22:08

China+accused+of+cyber-attack+on+Microsoft+Exchange+servers
The Biden administration and Western allies formally blamed China on Monday (18) for a massive hack of Microsoft Exchange email server software and accused Beijing of working with criminal hackers in ransomware attacks and other cyber operations.

The UK, US and EU have accused China of carrying out a major cyber-attack earlier this year according to foreign media reports.

The attack targeted Microsoft Exchange servers, affecting at least 30,000 organisations globally.

The UK said Chinese state-backed actors were responsible, while the EU said the attack came from "the territory of China".

The Chinese Ministry of State Security (MSS) was also accused of wider espionage activity and a broader pattern of "reckless" behaviour.

China has previously denied allegations of hacking and says it opposes all forms of cyber-crime.

The unified call-out of Beijing signals the gravity with which this case has been taken. Western intelligence officials say aspects of this case are markedly more serious than anything they have seen before.

The hackers exploited a vulnerability in Microsoft Exchange which allowed backdoors to be placed on systems that allowed further access.

The UK said the attack was likely to enable large-scale espionage, including the acquisition of personal information and intellectual property.

The backdoors used by the Chinese group were also exploited by other hacking groups, leaving systems vulnerable to ransomware attacks and espionage.

"The cyber attack on Microsoft Exchange Server by Chinese state-backed groups was a reckless but familiar pattern of behaviour," UK Foreign Secretary Dominic Raab said. "The Chinese Government must end this systematic cyber-sabotage and can expect to be held to account if it does not."

Western governments accuse the MSS of using hackers-for hire and want it to sever ties with them.

In a statement, the White House said it was "deeply concerned" that China had "fostered an intelligence enterprise that includes contract hackers who also conduct unsanctioned cyber-operations worldwide, including for their own personal profit".

The EU, meanwhile, said the hack had "resulted in security risks and significant economic loss for our government institutions and private companies".

Its statement, like that of the UK, also said it had seen other Chinese behaviour that it was calling-out at the same time. It linked it to two groups known as APT 40 and APT 31 which are believed to be linked to the MSS.

Despite the strong statements, there are no signs of sanctions against China. In contrast, new sanctions were placed on Russia for the recent SolarWinds campaign which many experts believe was less serious than the Microsoft Exchange campaign linked to China.

Microsoft announced details of the hack back in March, and said a China-linked group called Hafnium was responsible. China denied those accusations.

The widespread use of Microsoft Exchange left many businesses and organisations vulnerable, with a huge effort to try to mitigate the potential risks.

At the time, the US Department of Justice announced criminal charges against four MSS hackers which it said were linked to a long-term campaign targeting foreign governments and entities in key sectors in a least a dozen countries.


Special security plan implemented for the security of Worshippers during Good Friday and Easter
Friday, 29 March 2024 - 10:32

The police have taken steps to enhance security across the island's churches, as Sri Lanka continues to grapple with the tragic aftermath of the 2019 Easter... Read More

'Crypto King' Bankman-Fried sentenced to 25 years for multi-billion dollar FTX fraud
Friday, 29 March 2024 - 9:08

Sam Bankman-Fried was sentenced to 25 years in prison by a judge on Thursday for stealing $8 billion from customers of the now-bankrupt FTX cryptocurrency... Read More

Riyan Parag's magnificent 84 help Rajasthan Royals beat Delhi Capitals
Friday, 29 March 2024 - 8:50

Rajasthan Royals 185 for 5 (Parag 84, Ashwin 29, Axar 1-21, Khaleel 1-24) beat Delhi Capitals 173 for 5 (Warner 49, Stubbs 44*, Chahal 2-19, Burger 2-29)... Read More