Vulnerabilities / Threats
11/28/2010
07:44 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

China Directed Google Attack, Leaked Cable Says

A trove of diplomatic communications released by Wikileaks includes the claim that Chinese officials oversaw the cyber attack on Google.

Wikileaks on Sunday released hundreds of thousands of U.S. State Department documents online and to news organizations, presenting a range of potentially embarrassing revelations about back channel diplomacy between the U.S., allies, and other countries.

The documents, not all of which were immediately accessible to the public due to the cyber attack on Wikileaks, reveal discussions on a range of sensitive matters around the world, including worries about nuclear proliferation in Iran and North Korea.

The cables also reveal that China's Politburo "directed the intrusion into Google's computer systems," according to the New York Times, which was provided with copies of the documents.

A Chinese contact reportedly confirmed to U.S. embassy officials in Beijing the involvement of China's government in the cyber attack on Google's network that occurred late last year and was disclosed in January, 2010. The officially sanctioned cyber attack involved government operatives, private security contractors, and Internet criminals recruited by the Chinese government, the New York Times said.

Security companies said as much back in January. A report issued by iDefense, a computer security company owned by Verisign, claimed that 33 other companies were targeted in the cyber attack and that those responsible were working either directly for, or on behalf of, official intelligence entities of the People's Republic of China.

Such claims however have always proven problematic because finding the IP address of a computer through which an attack was conducted doesn't definitively reveal who controlled that computer or directed those responsible. And indeed, Chinese officials have repeatedly denied any involvement in the attack on Google and other companies.

Google declined to comment.

In a press briefing on Nov. 24, Philip J. Crowley, Assistant Secretary of Public Affairs at the State Department, said the cables are classified and denounced Wikileaks' decision to release of the documents.

"We decry what has happened," said Crowley. "These revelations are harmful to the United States and our interests. They are going to create tension in our relationships between our diplomats and our friends around the world. We wish that this would not happen. But we are, obviously, prepared for the possibility that it will."

U.S. Secretary of State Hillary Clinton has reportedly been reaching out to leaders in various countries to prepare them for the release of the diplomatic cables.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3352
Published: 2014-08-30
Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID CSCuh...

CVE-2014-3908
Published: 2014-08-30
The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2010-5110
Published: 2014-08-29
DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file.

CVE-2012-1503
Published: 2014-08-29
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote attackers to inject arbitrary web script or HTML via the comment section.

CVE-2013-5467
Published: 2014-08-29
Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring (ITM)...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
This episode of Dark Reading Radio looks at infosec security from the big enterprise POV with interviews featuring Ron Plesco, Cyber Investigations, Intelligence & Analytics at KPMG; and Chris Inglis & Chris Bell of Securonix.