Attacks/Breaches

6/11/2008
07:42 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

U.S. Rep. Wolf Says Chinese Hackers Targeted Him For Criticizing China

The legislator says four computers in his office had been compromised and that computers used by other members of Congress and by the House Foreign Affairs Committee had also been hacked.

In an effort to raise awareness about the dangers of cyber espionage, U.S. Rep. Frank Wolf (R-Va.) on Wednesday said that four computers in his office had been compromised in 2006 and that computers used by other members of Congress and by the House Foreign Affairs Committee had also been hacked.

Wolf said that based on meetings with FBI officials, the attacks appear to have originated in China. "These cyber attacks permitted the source to probe our computers to evaluate our system's defenses, and to view and copy information," said Wolf. "My suspicion is that I was targeted by Chinese sources because of my long history of speaking out about China's abysmal human rights record."

Many groups critical of China have reported online attacks after speaking out. The Chinese government maintains that it is not involved in such attacks and, in general, security experts agree, attributing such attacks to civilian hackers motivated by patriotism. However, the Chinese government's support for bellicose nationalism and selective enforcement of cyber crime laws may contribute to the willingness of Chinese hackers to strike perceived enemies of the state.

According to Wolf, the hacker or hackers broke into the computers of Wolf's foreign policy and human rights staff person, his chief of staff, his legislative director, and his judiciary staff person. "On these computers was information about all of the casework I have done on behalf of political dissidents and human rights activists around the world," he said. "That kind of information, as well as everything else on my office computers -- e-mails, memos, correspondence and district casework - was open for outside eyes to see."

In countries that criminalize political expression, such information can lead to the imprisonment or death of human rights activists.

Wolf said that despite government recognition of cyber security risks as far back as 1997 and "despite all the activity, reports, funding, and growth in the Department of Homeland Security, little seems to have changed in terms our vulnerability to cyber incidents."

Invoking British Parliamentarian William Wilberforce's demand in 1789 that his colleagues confront the horrors of slavery, Wolf concluded with his own call to action: "We cannot afford to look the other way when foreign sources are threatening to compromise our government institutions, our economy, our very way of life through cyber espionage. We cannot sit by and watch."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
More Than Half of Users Reuse Passwords
Curtis Franklin Jr., Senior Editor at Dark Reading,  5/24/2018
Is Threat Intelligence Garbage?
Chris McDaniels, Chief Information Security Officer of Mosaic451,  5/23/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-11505
PUBLISHED: 2018-05-26
The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat output.
CVE-2018-6409
PUBLISHED: 2018-05-26
An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding ap_form table leads to a path traversal vulnerability via the download.php q parameter.
CVE-2018-6410
PUBLISHED: 2018-05-26
An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.
CVE-2018-6411
PUBLISHED: 2018-05-26
An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically adds dangerous extensions to the filters. If the filter is set to a whitelist, the dangerous extensions can be bypassed through ap_form_elements SQL Injection.
CVE-2018-11500
PUBLISHED: 2018-05-26
An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF vulnerability in "admin/sysUser/save.do?callbackType=closeCurrent&navTabId=sysUser/list" that can add an admin account.