Chinese espionage in the United States

China is alleged to have begun a widespread effort to acquire U.S. military technology and classified information and the trade secrets of U.S. companies.[1][2] China is accused of stealing trade secrets and technology, often from companies in the United States, to help support its long-term military and commercial development.[3] China has been accused of using a number of methods to obtain U.S. technology (using U.S. law to avoid prosecution), including espionage, exploitation of commercial entities and a network of scientific, academic and business contacts.[4] Although it uses a network of contacts to collect information used to benefit Chinese businesses, each bit of information does not invite scrutiny or prosecution by the U.S. government. Espionage cases include Larry Wu-Tai Chin, Katrina Leung, Gwo-Bao Min, Chi Mak and Peter Lee.[5][6]

U.S. Department of Justice among others announced 23 criminal charges (Financial Fraud, Money Laundering, Conspiracy to Defraud the United States, Theft of Trade Secret Technology and Sanctions Violations, etc.) against Huawei & its CFO Wanzhou Meng
For a list of individuals suspected or convicted of spying on the United States for China, see List of Chinese spy cases in the United States.

In addition to traditional espionage, China partners civilian Chinese companies with American businesses to acquire technology and economic data[7] and uses cyber spying to penetrate the computer networks of U.S. businesses and government agencies; an example is the December 2009 Operation Aurora.[8] U.S. law enforcement officials have identified China as the most active foreign power involved in the illegal acquisition of American technology.[9] On May 19, 2014, the United States Department of Justice announced that a Federal grand jury had indicted five People's Liberation Army officers for stealing confidential business information and intellectual property from U.S. commercial firms and planting malware on their computers.[1][2]

Methods

China has used a variety of methods to gather intelligence in the United States.[10][11][12][13][14][15] Individuals attempt to obtain targeted information from open sources such as libraries, research institutions and unclassified databases.[10] Chinese travelers are recruited to carry out specific intelligence activities, and China debriefs returnees from exchange programs, trade missions and scientific-cooperation programs.[16] Chinese citizens may be coerced to cooperate.[17]

Much technology acquisition occurs through commerce and commercial regulations. The regulatory and commercial environment in China pressures American and other foreign companies to transfer technology, capital and manufacturing expertise, especially in defense-related or dual-use industries such as computers, to their Chinese partners as part of doing business in China's huge, lucrative markets.[18][19] Chinese agents purchase high-tech equipment through front organizations in Hong Kong.[16][18] China also uses state-run firms to purchase American companies with access to the targeted technology.[16]

China also accesses foreign technology through industrial espionage,[18] with U.S. Immigration and Customs Enforcement officials rating China's industrial-espionage and theft operations as the leading threat to U.S. technological security.[20] Between October 2002 and January 2003 five Chinese businessmen were accused of illegally shipping equipment and trade secrets from California to China,[10] and U.S. officials prevented a Chinese man from shipping a new, high-speed computer used in classified projects (including nuclear-weapons development) from Sandia National Laboratories.[10]

Nuclear espionage

A 1999 United States House of Representatives Select Committee on U.S. National Security and Military and Commercial Concerns with the People's Republic of China report, known as the Cox Report, warned that China has stolen classified information on every thermonuclear warhead in the country's intercontinental ballistic missile arsenal.[21] Information is collected through espionage, reviews of U.S. technical and academic publications and interaction with U.S. scientists.[22] China tasks a large number of individuals to collect small pieces of information (which are collated and analyzed),[22] and individual agents can more easily escape suspicion. U.S. government personnel suspect that China's intelligence-gathering efforts directed towards the development of modern nuclear weapons are focused on the Los Alamos, Lawrence Livermore, Sandia and Oak Ridge National Laboratories.[22] China is known to have stolen classified information on the W-56 Minuteman II ICBM, the W-62 Minuteman III ICBM, the W-70 Lance short-range ballistic missile (SRBM), the W-76 Trident C-4 submarine-launched ballistic missile (SLBM), the W-78 Minuteman III Mark 12A ICBM, the W-87 Peacekeeper ICBM and the W-88 Trident D-5 SLBM and weapon-design concepts and features.[23]

In 2016, the U.S. Justice Department charged China General Nuclear Power Group (CGN) with stealing nuclear secrets from the United States.[24][25][26] The Guardian reported: "According to the US Department of Justice, the FBI has discovered evidence that China General Nuclear Power (CGN) has been engaged in a conspiracy to steal US nuclear secrets stretching back almost two decades. Both CGN and one of the corporation’s senior advisers, Szuhsiung Ho, have been charged with conspiring to help the Chinese government develop nuclear material in a manner that is in clear breach of US law."[27]

Cyberwarfare
Main article: Chinese cyberwarfare
See also: Chinese information operations and information warfare

China conducts political and corporate espionage to access the networks of financial, defense and technology companies and research institutions in the United States.[28] Email attachments attempting to enter the networks of U.S. companies and organizations exploit security weaknesses in software.[28] A recipient opens an email attachment, apparently from a familiar source, containing a program which embeds in the recipient's computer. The remotely controlled program allows an attacker to access the recipient's email, send sensitive documents to specific addresses and turns on such instruments as web cameras or microphones.[28]

In January 2010, Google reported "a highly sophisticated and targeted attack on our corporate infrastructure originating from China that resulted in the theft of intellectual property from Google".[29] According to investigators, the Google cyber-attack targeted the Gmail accounts of Chinese human-rights activists.[29] At least 34 other companies have been attacked, including Yahoo, Symantec, Adobe, Northrop Grumman and Dow Chemical.[28]

In January 2013, The New York Times reported that it was the victim of hacking attempts originating from China during the previous four months after it published an article on Prime Minister Wen Jiabao. According to the newspaper, the "attacks appear to be part of a broader computer espionage campaign against American news media companies that have reported on Chinese leaders and corporations."[30]

Chinese cyber-attacks seem to target strategic industries in which China lags;[28] attacks on defense companies target weapons-systems information, and attacks on technology companies seek source code critical to software applications.[28] Operation Aurora emphasized what senior U.S. government officials have called an increasingly serious cyber threat to critical industries.[28]

Amitai Etzioni of the Institute for Communitarian Policy Studies has suggested that cyberspace could be a fruitful realm for the United States and China to implement a policy of mutually assured restraint allowing both states to take measures they deem necessary for self-defense while agreeing to refrain from offensive steps. Such a policy would require oversight.[31]

On August 6, 2020 U.S. President Donald Trump officially extended restrictions against Chinese-owned apps by signing two executive orders that would ban U.S. residents from doing business with TikTok and WeChat, a popular messaging platform run by Tencent Holdings Ltd. The ban, which goes into effect in 45 days, was enacted citing the security risk of leaving Americans’ personal data exposed.[32]

2010–2012 compromise of CIA network

Between 2010 and 2012, China was able to arrest or kill between 18 and 20 CIA assets within China.[33] A joint CIA/FBI counterintelligence operation, codenamed "Honey Bear", was unable to definitely determine the source of the compromises, though theories include the existence of a mole, cyber-espionage, or poor tradecraft.[33] Mark Kelton, then the Deputy Director of the National Clandestine Service for Counterintelligence, was initially skeptical that a mole was to blame.[33]

In January 2018, a former CIA officer named Jerry Chun Shing Lee[note 1] was arrested at John F. Kennedy International Airport, on suspicion of helping dismantle the CIA's network of informants in China.[36][37]

Cyber cases

In 2007 the computer security company McAfee alleged that China was actively involved in cyberwarfare, accusing the country of cyber-attacks on India, Germany and the United States; China denied knowledge of these attacks. In September 2007 former senior U.S. information security official Paul Strassmann said that 735,598 computers in the U.S. were "infested with Chinese zombies"; computers infected in this manner can theoretically form a botnet capable of carrying out unsophisticated yet potentially dangerous denial-of-service attacks.[38] A cyber spying network known as GhostNet, using servers primarily based in China, was reported as tapping into the classified documents of government and private organizations in 103 countries (including Tibetan exiles);[39][40] China denied the claim.[41][42]

APT 1
Further information: Advanced persistent threat

In December 2009 and January 2010 a cyberattack, known as Operation Aurora, was launched from China on Google and over 20 other companies.[43] Google said that the attacks originated from China, and it would "review the feasibility" of its business operations in China as a result of the incident. According to Google, at least 20 other companies in a variety of sectors were also targeted by the attacks. According to McAfee, "this is the highest profile attack of its kind that we have seen in recent memory."[44]

In May 2014, a U.S. Federal grand jury indicted five Chinese military officers for cybercrimes and stealing trade secrets.[2] It was alleged that the Chinese officers hacked into the computers of six U.S. companies to steal information that would provide an economic advantage to Chinese competitors, including Chinese state-owned enterprises. China said that the charges were "made-up", and the indictment would damage trust between the two nations.[45] Although the indictments have been called relatively meaningless, they could limit travel by the officers due to U.S. extradition treaties.[46]

APT 3

In November 2017, the Department of Justice charged three Chinese employees of Guangzhou Bo Yu Information Technology Company Limited with hacking into corporate entities in the United States, including Siemens AG, Moody's Analytics, and Trimble Inc.[47]

APT 10

Since at least 2013, a Chinese espionage group called TEMP.Periscope by FireEye is reported to have been engaged in espionage against maritime-related subjects.[48] FireEye reported that the information targeted was likely of commercial and economic importance.[48]

The People's Liberation Army (PLA) was tied to economic espionage involving stolen business plans, intellectual property, and infringed on private conversations from Westinghouse Electric and United States Steel Corporation.[49]

Chinese hackers have stolen information on the Patriot missile system, the F-35 Joint Strike Fighter, and the U.S. Navy's new Littoral combat ship. These blueprints of U.S. weapon and control systems were stolen to advance the development of Chinese weaponry.[50]

The protection of the South China Sea is highly important to the U.S. because a Chinese Cyber Unit has already succeeded in an intrusion into the Philippine's government and military networks. Military documents, internal communications, and other sensitive materials related to the dispute were lost due to the cyber invasion.[51]

In January and February 2018, Chinese hackers reportedly stole 614 gigabytes of data from a Naval Undersea Warfare Center-affiliated contractor.[52] The compromised material reportedly included information on a project dubbed "Sea Dragon", as well as United States Navy submarine cryptographic systems and electronic warfare.[52]

The New York Times reported that Russia and China are routinely eavesdropping on calls from an iPhone used by President Donald Trump, with China reportedly attempting to influence the President by identifying and influencing the people Trump is regularly in contact with.[53][54]

According to the cybersecurity firm Area 1, hackers working for the People's Liberation Army Strategic Support Force compromised the networks of the AFL–CIO in order to gain information on negotiations for the Trans-Pacific Partnership.[55]

As part of a campaign called Cloudhopper, hackers working for the Ministry of State Security compromised the networks of IBM and Hewlett Packard Enterprise, and used that access to compromise those companies' clients.[56][57] The Cloudhopper attacks began no later than 2014, and included targets in Brazil, Germany, India, Japan, the United Arab Emirates, the United Kingdom, and the United States.[57]

In October 2018, Bloomberg Businessweek published a story which alleged that Supermicro's contractors in China had been compromised by the People's Liberation Army to implant microchips with hardware backdoors in its servers. The report was widely disputed by the sources and companies who were named within.[58][59]

In March 2019, iDefense reported that Chinese hackers had launched cyberattacks on dozens of academic institutions in an attempt to gain information on technology being developed for the United States Navy.[60] Some of the targets included the University of Hawaii, the University of Washington, the Massachusetts Institute of Technology, and Woods Hole Oceanographic Institution.[60] The attacks have been underway since at least April 2017.[60]

In July 2020, the United States department of justice indicted that two Chinese Hackers were charged with global computer intrusion campaign targeting Intellectual Property and Confidential Business Information, Including COVID-19 Research. Two Hackers worked with the Guangdong State Security Department of the Ministry of State Security (China). [61]

gollark: Of course, you probably want to use base *fifteen* or something on the redstone linkups to ensure that "sender off" doesn't count as "sending a billion NUL bytes".
gollark: Now, if you run multiple interfaces in parallel via redstone integrators, that changes it somewhat.
gollark: Okay, sending all potatOS over an analog redstone link with one change per tick would take 20 minutes.
gollark: https://pastebin.com/RM13UGFa and why do you hate potatOS.
gollark: 96 kbits...

See also

Notes
  1. Alternatively known as Zhen Cheng Li.[34][35]

References

Citations
  1. Finkle, J. Menn, J., Viswanatha, J. U.S. accuses China of cyber spying on American companies. Archived October 6, 2014, at the Wayback Machine Reuters, Mon 19 May 2014 6:04pm EDT.
  2. Clayton, M. US indicts five in China's secret 'Unit 61398' for cyber-spying. Archived May 20, 2014, at the Wayback Machine Christian Science Monitor, May 19, 2014
  3. Mattis, Peter; Brazil, Matthew (November 15, 2019). Chinese Communist Espionage: An Intelligence Primer. Naval Institute Press. ISBN 978-1-68247-304-7.
  4. deGraffenreid, p. 30.
  5. Global Security. "Ministry of State Security Operations." Archived April 1, 2010, at the Wayback Machine (accessed March 11, 2010).
  6. Wortzel, p. 6.
  7. Wortzel, p. 9.
  8. Helft, Miguel and John Markoff, "In Rebuke of China, Focus Falls on Cybersecuirty," The New York Times, January 13, 2010.
  9. Wortzel, p. 8.
  10. Polmar, Norman and Thomas B. Allen, Spy Book: The Encyclopedia of Espionage, Second Edition, (New York, NY: Random House Reference, 2004), p. 125.
  11. "China Seen in Push to Gain Technology Insights". The New York Times. June 6, 2013. Archived from the original on May 16, 2017. Retrieved June 18, 2017.
  12. Markoff, John; Rosenberg, Matthew (February 3, 2017). "China's Intelligent Weaponry Gets Smarter". The New York Times. Archived from the original on May 28, 2017. Retrieved June 18, 2017.
  13. "The Unpleasant Truth About Chinese Espionage". April 22, 2016. Archived from the original on June 17, 2017. Retrieved June 18, 2017.
  14. Trade (August 2, 2016). "Why Access To China Can Be Suicide For U.S. Companies". The Federalist. Archived from the original on September 1, 2017. Retrieved June 18, 2017.
  15. https://www.facebook.com/dlamothe. "Navy officer accused of passing secrets faces espionage and prostitution charges". Washington Post. Archived from the original on May 18, 2017. Retrieved June 18, 2017.
  16. Eftimiades, p. 28.
  17. Wortzel, p. 5.
  18. Wortzel, p. 4.
  19. Wortzel, p. 3.
  20. U.S. Department of Defense, Annual Report to Congress on the Military Power of the People's Republic of China, (Washington, DC: July 2007), p. 29.
  21. deGraffenreid, p. 99.
  22. deGraffenreid, p. 98.
  23. deGraffenreid, p. 100.
  24. "U.S. tightens controls on China imports of nuclear components". Reuters. October 11, 2018. Archived from the original on May 25, 2019. Retrieved May 25, 2019.
  25. "Spy warning on Chinese nuclear company". The Week. October 25, 2018. Archived from the original on May 25, 2019. Retrieved May 25, 2019.
  26. Schweizer, Peter (May 11, 2019). "The troubling reason why Biden is so soft on China". New York Post. Archived from the original on May 26, 2019. Retrieved May 25, 2019.
  27. "Hinkley Point C: case against Chinese firm has the feel of a modern spy thriller". The Guardian. August 11, 2016. Archived from the original on May 25, 2019. Retrieved May 25, 2019.
  28. Cha, Ariana Eunjung; Nakashima, Ellen (January 14, 2010). "Google China cyberattack part of vast espionage campaign, experts say". The Washington Post. Archived from the original on August 21, 2017. Retrieved August 25, 2017.
  29. Markoff, John (April 19, 2010). "Cyberattack on Google Said to Hit Password System". The New York Times. Archived from the original on April 5, 2020. Retrieved April 6, 2020.
  30. Perlroth, Nicole (January 30, 2013). "Hackers in China Attacked The Times for Last 4 Months". The New York Times. Archived from the original on February 2, 2013. Retrieved January 31, 2013.
  31. Amitai Etzioni, The Diplomat. "MAR: A Model for US-China Relations". The Diplomat. Archived from the original on June 10, 2014. Retrieved August 25, 2014.
  32. Restuccia, Andrew (August 7, 2020). "Trump Executive Orders Target TikTok, WeChat Apps". The Wall Street Journal. ISSN 0099-9660. Retrieved August 13, 2020.
  33. Mazzetti, Mark; Goldman, Adam; Schmidt, Michael S.; Apuzzo, Matthew (May 20, 2017). "Killing C.I.A. Informants, China Crippled U.S. Spying Operations". The New York Times. Archived from the original on May 20, 2017. Retrieved May 20, 2017.
  34. Haas, Benjamin (January 18, 2018). "'Very discreet': arrested CIA spy kept a low profile in Hong Kong". The Guardian. Archived from the original on January 19, 2018. Retrieved January 19, 2018. He did not maintain any internet presence under his name in English or Chinese, or under an alternative spelling Zhen Cheng Li. He may have used an alias or avoided using public internet accounts altogether.
  35. "Ex-CIA officer Jerry Chun Shing Lee held over secret records". BBC News. January 16, 2018. Archived from the original on January 17, 2018. Retrieved January 16, 2018.
  36. Goldman, Adam (January 16, 2018). "Ex-C.I.A. Officer Suspected of Compromising Chinese Informants Is Arrested". The New York Times. Archived from the original on January 17, 2018. Retrieved January 16, 2018.
  37. O'Brien, Kellie R. (January 13, 2018). "Case 1:18-mj-00018-JFA" (PDF). Archived (PDF) from the original on October 11, 2019. Retrieved January 17, 2018.
  38. Waterman, Shaun (September 17, 2007). "China 'has .75M zombie computers' in U.S." United Press International. Archived from the original on November 12, 2014. Retrieved November 30, 2007.
  39. "Researchers: Cyber spies break into govt computers". Archived from the original on April 3, 2009. Retrieved July 29, 2011.
  40. "CTV News: Video clip". Watch.ctv.ca. Archived from the original on March 30, 2009. Retrieved August 25, 2014.
  41. "Foreign Ministry Spokesperson Qin Gang's Remarks on the So-called Chinese Cyber-Spy Ring Invading Computers in Countries". Fmprc.gov.cn. Archived from the original on May 28, 2013. Retrieved August 25, 2014.
  42. "Chinese embassy scoffs at reports of cyber spying". Theaustralian.news.com.au. Archived from the original on April 8, 2009. Retrieved July 29, 2011.
  43. "A new approach to China". Google Inc. January 12, 2010. Archived from the original on January 13, 2010. Retrieved January 17, 2010.
  44. "Google Attack Is Tip Of Iceberg" Archived July 14, 2011, at the Wayback Machine, McAfee Security Insights, January 13, 2010
  45. "Beijing denies corporate cyber spying charge against five Chinese military officials". China News.Net. Archived from the original on May 21, 2014. Retrieved May 20, 2014.
  46. "The Cyber Cold War". The Huffington Post. Archived from the original on June 15, 2014. Retrieved June 5, 2014.
  47. Department of Justice, Office of Public Affairs (November 27, 2017). "U.S. Charges Three Chinese Hackers Who Work at Internet Security Firm for Hacking Three Corporations for Commercial Advantage". United States Department of Justice. Archived from the original on December 19, 2017. Retrieved December 20, 2017. An indictment was unsealed today against Wu Yingzhuo, Dong Hao and Xia Lei, all of whom are Chinese nationals and residents of China, for computer hacking, theft of trade secrets, conspiracy and identity theft directed at U.S. and foreign employees and computers of three corporate victims in the financial, engineering and technology industries between 2011 and May 2017. The three Chinese hackers work for the purported China-based Internet security firm Guangzhou Bo Yu Information Technology Company Limited (a/k/a "Boyusec").
  48. "Suspected Chinese Cyber Espionage Group (TEMP.Periscope) Targeting U.S. Engineering and Maritime Industries". FireEye. March 16, 2018. Archived from the original on March 16, 2018.
  49. Segal, A. (2018). How China is preparing for cyberwar. The Christian Science Monitor
  50. Abad-Santos, A. (2018). China Is Winning the Cyber War Because They Hacked U.S. Plans for Real War. The Atlantic.
  51. Piiparinen, Anni. 2015. “The Chinese Cyber Threat in the South China Sea.” The Diplomat. The Diplomat. September 18
  52. Walsh, Eric (June 8, 2018). Berlowitz, Phil; Dalgleish, James (eds.). "China hacked sensitive U.S. Navy undersea warfare plans: Washington Post". Reuters. Archived from the original on June 12, 2018. Retrieved June 9, 2018.
  53. Rosenberg, Matthew; Haberman, Maggie (October 24, 2018). "When Trump Phones Friends, the Chinese and the Russians Listen and Learn". The New York Times. Archived from the original on October 25, 2018. Retrieved October 25, 2018.
  54. Campbell, Mikey (October 24, 2018). "Trump refuses to give up iPhones, Chinese and Russian spies eavesdrop on calls". AppleInsider. Archived from the original on October 25, 2018. Retrieved October 25, 2018. President Donald Trump's unwillingness to ditch Apple's iPhone in favor of more secure hardware has granted Chinese and Russian spies an open door into his private phone conversations, according to a new report.
  55. Sanger, David E.; Erlanger, Steven (December 18, 2018). "Hacked European Cables Reveal a World of Anxiety About Trump, Russia and Iran". The New York Times. Archived from the original on December 19, 2018. Retrieved December 19, 2018. The cyberintruders also infiltrated the networks of the United Nations, the A.F.L.-C.I.O., and ministries of foreign affairs and finance worldwide. The hack of the A.F.L.-C.I.O. focused on issues surrounding the negotiations over the Trans-Pacific Partnership, a trade deal that excluded Beijing.
  56. Barry, Rob; Volz, Dustin (December 30, 2019). "Ghosts in the Clouds: Inside China's Major Corporate Hack". The Wall Street Journal. Archived from the original on December 31, 2019. Retrieved January 24, 2020.
  57. Bing, Christopher; Stubbs, Jack; Menn, Joseph. Finkle, Jim; Oatis, Jonathan (eds.). "Exclusive: China hacked HPE, IBM and then attacked clients - sources". Reuters. Archived from the original on December 21, 2018.
  58. "Bloomberg stands by Chinese chip story as Apple, Amazon ratchet up denials". Ars Technica. Archived from the original on July 10, 2019. Retrieved October 7, 2018.
  59. Osborne, Charlie. "Security researcher source in Supermicro chip hack report casts doubt on story". ZDNet. Archived from the original on June 18, 2019. Retrieved October 9, 2018.
  60. Sekine, Sara (March 6, 2019). "Chinese hackers target North American and Asian universities". Nikkei Asian Review. Archived from the original on May 27, 2019. Retrieved March 6, 2019.
  61. Office of Public Affairs, Department of Justice (July 21, 2020). "People around the globe are divided in their opinions of China". the United States department of justice . Retrieved August 6, 2020.

Sources
Works cited
Library resources about
Chinese espionage in the United States
  • deGraffenreid, Kenneth (ed.), The Unanimous and Bipartisan Report of the House Select Committee on U.S. National Security and Military Commercial Concerns with the People's Republic of China ("The Cox Report"). Select Committee, U.S. House of Representatives (Washington, DC: Regnery, 1999).
  • Eftimiades, Nicholas, Chinese Intelligence Operations Archived April 11, 2020, at the Wayback Machine (Annapolis, MD: Naval Institute Press, 1994).
  • Wortzel, Larry M., Hearing on "Enforcement of Federal Espionage Laws." Testimony before the Subcommittee on Crime, Terrorism, and Homeland Security of the House Committee on the Judiciary, U.S. House of Representatives, January 29, 2008.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.