US Thwarts Chinese Hacker Attacks on Essential American Infrastructure
In recent months, the U.S. government initiated an operation to combat an extensive Chinese hacking campaign that compromised numerous internet-connected devices, as revealed by two Western security officials and an individual familiar with the matter. According to sources, the Justice Department and the Federal Bureau of Investigation obtained legal authorization to remotely disable certain aspects of the Chinese hacking efforts.
Attacks Attributed to Volt Typhoon APT
The Biden administration's increased focus on hacking is not only driven by concerns that nation states might attempt to disrupt the U.S. election in November but also due to the significant impact of ransomware on Corporate America in 2023. The hacking group at the center of the recent activities, Volt Typhoon, has particularly alarmed intelligence officials who believe it is part of a larger initiative to compromise critical Western infrastructure, including naval ports, internet service providers, and utilities.
While the Volt Typhoon campaign was initially disclosed in May 2023, the hackers expanded their operations late last year and modified some of their techniques, according to three sources familiar with the matter. The widespread nature of these hacks prompted meetings between the White House and private technology industry representatives, including telecommunications and cloud computing companies, seeking assistance in tracking the malicious activity.
US Concerned Hackers Are Undermining US Indo-Pacific Infrastructure
National security experts warn that such breaches could allow China to remotely disrupt essential facilities in the Indo-Pacific region that support or service U.S. military operations. U.S. officials express concerns that the hackers may be working to undermine U.S. readiness in the event of a Chinese invasion of Taiwan.
China's foreign ministry spokesperson, Wang Wenbin, characterized the U.S. as the "initiator and master of cyber attacks" and highlighted China's reports revealing alleged U.S. cyber attacks on its critical infrastructure. The hacking group Volt Typhoon operates by taking control of vulnerable digital devices globally, such as routers, modems, and internet-connected security cameras, creating a botnet that poses challenges for cyber defenders monitoring foreign footprints in computer networks.
