China denies role in reported government of Canada hack
IDG News Service - The Chinese government is denying any involvement in a reported cyberattack on the Canadian government, which was ultimately traced to a Chinese server.
The Chinese government is firmly opposed to hacking and other criminal acts, Foreign Ministry Spokesman Ma Zhaoxu said at a press conference Thursday. China is also a victim of computer hacking, he said. "The allegation that China supports hacking is groundless," he said.
The Canadian Broadcasting Corporation (CBC) reported Wednesday that authorities were forced to shut down Internet access to thousands of workers in the Canadian government's Finance Department and Treasury Board, after attackers
"posing as the federal executives, sent e-mails to departmental technical staffers, conning them into providing key passwords unlocking access to government networks," the CBC said.
The purpose of the attack was apparently to steal documents that contained classified government information.
Victims were also tricked into opening maliciously encoded documents, using a well-known technique called spear-phishing. With spear-phishing, the attacker does some research ahead of time and then picks a small number of victims, sending them a believable looking document -- a memo about an upcoming event, sent from a company executive, for example -- in the hopes that the victim will open this malicious attachment and their computer would be hacked.
The hacked computer is then used as a jumping-off point for computer-based espionage, as the hackers prowl through the victim's network in search of data.
This technique has been used successfully against U.S. government agencies and contractors for years now, according to security experts. Many believe these spear-phishing attacks to be part of a concerted espionage effort by the Chinese government, but this is nearly impossible to prove. China is often used as a path for all types of cyberattacks and it is possible that the attacker in this latest incident simply routed traffic through Chinese servers.
The Canadian government learned it had been compromised in January, the CBC reported. The office of Canadian Prime Minister Stephen Harper could not immediately be reached for comment.
This pilot fish is a contractor at a military base, working on some very cool fire-control systems for tanks. But when he spots something obviously wrong during a live-fire test, he can't get the firing-range commander's attention.
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Reduce federal infrastructure risk with compliance management and situational awareness
- IBM continuous monitoring and management solutions deliver real-time situational awareness to help federal agencies understand vulnerabilities, and protect the infrastructure.
- Considerations For Effective Software License Management
- For many reasons, software license management has become a critical issue for many IT organizations and enterprise's alike. With many licensing options, hurdles...
- eBay uses 100% OpenSource WSO2 ESB to process more than 1Billion transactions a day
- Along with eBay's success comes a huge demand to ensure reliable, 24x7 availability of the services that enable these transactions. For eBay, that...
- A Reference Architecture for the Internet of Things
- The aim of this is to provide Architects and Developers of IoT projects with an effective starting point that covers the major requirements...
- REST easy: API Design, Evolution and Connection
- RESTful design increases API performance, reduces development effort, and minimizes operational support burden. By following a few best practices and selecting RESTful tooling,... All Government IT White Papers
- It's not too late...Get Your Mobile Questions Answered Live! How can IT provide seamless and secure mobile communications and collaboration for all? Join this live Webcast as IDG asks an expert panel...
- Why do you need an enterprise mobile platform? Today companies must offer great apps that run on a range of devices, and connect to an exploding set of backend data. Appcelerator...
- The Foundation You Need to Build a Better Storage Infrastructure Watch this webcast to hear how you can maximize the economics of your data center by modifying your storage footprint and power usage...
- Building Tomorrow's Data Center with Converged Technologies A number of forces are converging: the cloud, converged infrastructure, big data and fabric architectures to name a few.
- Technology for Everyone A Kansas school district modernizes teaching and learning and paves the way to a one-to-one program with a comprehensive upgrade of its wireless...
- All Government IT Webcasts