Attacks/Breaches
12/2/2010
11:34 AM
Connect Directly
RSS
E-Mail
50%
50%
Repost This

China Struggling To Combat Hackers

Ministry of Public Security said it's seen an 80% annual increase in hacking cases since 2006.

Strategic Security Survey: Global Threat, Local Pain
Strategic Security Survey: Global Threat, Local Pain
(click image for larger view and for full slideshow)
China continues to crack down on hackers operating inside its borders, but it's facing an uphill battle. So said a statement released Monday by China's Ministry of Public Security.

Officials said that from January 2010 to the end of November, they'd arrested 460 hacking suspects, cracked 180 cases involving hacking and busted 14 websites which provided hacking tools and support. But the Ministry also said that the number of hacking cases it sees have been increasing by about 80% per year since 2006, challenging law enforcement agencies' ability to crack down.

"Hacking attacks and the destruction they cause are rapidly increasing. We face a grim situation," said Gu Jian, deputy director of the network security bureau of the Ministry of Public Security, according to an article published on Thursday by People's Daily Online, an English-language Chinese daily newspaper.

According to the newspaper, one case detailed by Gu involved a "hacking training website" called the Huaxia Hacking Union, which was shuttered by police in the city of Macheng. Authorities confiscated $54,000 in profits and found that between the website's founding in November 2006 and forced closure in August 2010, it had amassed about 10,000 members.

Botnets are a pervasive problem in China. According to Ministry statistics cited by the newspaper, 80% of PCs in China "have at some point been controlled by botnets," Furthermore, in the first half of 2010, 127,000 IP addresses from overseas were "involved in maliciously controlling computers" in China.

On a similar note, authorities said that 80% of attacks against China's government websites are launched from overseas. The public details of China's ongoing crackdown on online criminals inside its borders came on the heels of Sunday's release of hundreds of thousands of U.S. State Department documents by Wikileaks. According to the New York Times, the cables revealed that China's Politburo directed the attacks made against Google that occurred late last year, and were disclosed in January 2010.

The statement from China's Ministry of Public Security didn't address those allegations or comment on recent accusations -- questioned by outside experts -- that a leading Chinese Internet service provider rerouted sensitive U.S. government website traffic for 18 minutes earlier this year.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-3946
Published: 2014-04-24
Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682.

CVE-2012-5723
Published: 2014-04-24
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

CVE-2013-6738
Published: 2014-04-24
Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an invalid query parameter in a response from an OAuth authorization endpoint.

CVE-2014-2391
Published: 2014-04-24
The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain potent...

CVE-2014-2392
Published: 2014-04-24
The E-Mail autoconfiguration feature in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 places a password in a GET request, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer log...

Best of the Web