Welcome Guest. | Log In| Register | Membership Benefits
  • Email this page E-mail this page
  • |  Print Print this page
  • |   Bookmark and Share

China's Premier 'Gravely Concerned' by Hack on Germany

Top-ranked officials discuss alleged cyber attack at diplomatic meeting

Aug 27, 2007 | 09:30 AM

By Tim Wilson
DarkReading

Chinese premier Wen Jiabao is "gravely concerned" by allegations that hackers in his country have attacked German government systems, according to a report from the two countries' diplomatic meeting earlier today.

Late last week, just a few days before a landmark meeting between German Chancellor Angela Merkel and Jiabao, the German magazine Der Spiegel reported that government officials had discovered attempts to steal data from computers in the German Chancellery and its Foreign, Economics, and Research ministries.

Data from German government systems was being downloaded almost daily in May by hackers in Lanzhou, in the province of Canton, and in Beijing, according to the magazine report. The large scale of the attacks suggests that it might have been committed by a military agency such as China's People's Liberation Army, the report says. There have been numerous reports recently suggesting that China was building up its cyber attack capability. (See China to Use Computer Viruses as Cyberwarfare First Strike.)

Chinese authorities vehemently denied the allegations upon publication. But in remarks at a joint press conference earlier today, Jiabao said he is "gravely concerned" about the report, and that his country will work with German officials to resolve the matter.

Neither of the two governments gave details on the nature of the hack. One report indicated that the theft was attempted via spyware; another reported an infection by a Trojan.

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.


Subscribe to RSS










Bugs
ENTERPRISE VULNERABILITIES
Vulnerability:suse linux
Published:2010-01-22
Severity:High
Description:SUSE Linux Enterprise 10 SP3 (SLE10-SP3) configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:The URL validation functionality in Microsoft Internet Explorer 7 and 8 does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."
Vulnerability:bind
Published:2010-01-22
Severity:Medium
Description:ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.
Vulnerability:ie
Published:2010-01-22
Severity:High
Description:Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246.


Briefing Centers
POWERFUL INFORMATION
AT YOUR FINGERTIPS
(SPONSORED LINKS)