News / Science & Technology

Researcher: Chinese Hackers Spied on Europeans Before G20 Meeting

Russia's President Vladimir Putin speaks during a media conference after a G20 summit in St. Petersburg, Russia on Sept. 6, 2013.
Russia's President Vladimir Putin speaks during a media conference after a G20 summit in St. Petersburg, Russia on Sept. 6, 2013.
Reuters
Chinese hackers eavesdropped on the computers of five European foreign ministries before last September's G20 Summit, which was dominated by the Syrian crisis, according to research by computer security firm FireEye.
 
The hackers infiltrated the ministries' computer networks by sending emails to staff containing tainted files with titles such as “UStmilitarytoptionstintSyria,” said FireEye, which sells virus fighting technology to companies.
 
When recipients opened these documents, they loaded malicious code on to their personal computers.
 
For about a week in late August, California-based FireEye said its researchers were able to monitor the “inner workings” of the main computer server used by the hackers to conduct their reconnaissance and move across compromised systems.
 
FireEye lost access to the hackers after they moved to another server shortly before the G20 Summit in St. Petersburg, Russia. FireEye said it believes the hackers were preparing to start stealing data just as the researchers lost access.
 
The U.S. company declined to identify the nations whose ministries were hacked, although it said they were all members of the European Union. FireEye said it reported the attacks to the victims through the Federal Bureau of Investigation.
 
A spokeswoman for the FBI, Jenny Shearer, declined to comment.
 
“The theme of the attacks was U.S. military intervention in Syria,” said FireEye researcher Nart Villeneuve, one of six researchers who prepared the report. “That seems to indicate something more than intellectual property theft... The intent was to target those involved with the G20.”
 
The Sept. 5-6 G20 summit was dominated by discussion of the Syrian crisis, with some European leaders putting pressure on U.S. President Barack Obama to hold off on taking military action against Syrian President Bashar al-Assad.
 
Villeneuve said he was confident that the hackers were from China based on a variety of technical evidence, including the language used on their control server and the machines that they used to test their malicious code.
 
However, Villeneuve also admitted that he did not have any hard evidence that linked the hackers to the Chinese government. “All we have is technical data,” Villeneuve said, stressing the impossibility of coming to an absolute conclusion on technical data alone.
 
Chinese Foreign Ministry spokesman Hong Lei said China opposed any hacking activities.
 
“U.S. internet companies are keen on hyping up the so-called hacker threat from China, but they never obtain irrefutable proof, and what so-called evidence they do get is widely doubted by experts. This is neither professional nor responsible,” Hong told a daily news briefing in Beijing.
 
One of Dozens
 
Western cybersecurity firms monitor several dozen hacking groups operating in China, most of which they suspect of having ties to the government. The firms also suspect the hacking groups of stealing intellectual property for commercial gain.
 
China has long denied those allegations, saying it is the victim of spying by the United States. Those claims gained some credibility after former National Security Agency contractor Edward Snowden began leaking documents about U.S. surveillance of foreign countries, including China.
 
FireEye said it had been following the hackers behind the Syria-related attack for several years, but this is the first time the group's activities have been publicly documented. The company calls the group “Ke3chang,” after the name of one of the files it uses in one of its pieces of malicious software.
 
FireEye said it believed the hackers dubbed the Syria-related campaign “moviestar” because that phrase was used as a tag on communications between infected computers and the hackers' command-and-control server.
 
In 2011, the group ran another operation dubbed “snake”, which enticed victims with a file that FireEye said contained nude pictures of Carla Bruni, the Italian-French singer, songwriter and model who in 2008 married then French President Nicolas Sarkozy.
 
The host name for that campaign's command-and-control server contained the string “g20news”, which might indicate that it was related to the G20 Finance Ministers meeting in Paris in 2011, FireEye said.
 
The email address used to send those malicious files had the phrase “consulate” in it, which also bolstered the possibility that the attack was politically motivated, Villeneuve said.
 
He said researchers only gathered evidence about “snake” through reviewing emails and malicious code. They did not have access to its command-and-control server, which they did in the case of the “moviestar” attack.

You May Like

Russia Names US NGO 'Undesirable'

Prosecutors determine activities of National Endowment for Democracy to be 'undesirable,' paving the way for it to be outlawed on Russian territory More

Erdogan Vows 'Anti-Terror' Campaign in Syria, Iraq

Erdogan expressed confidence the 'necessary steps' will be taken by NATO leaders, who will meet Tuesday at Turkey's request More

North Korea: 'No Interest at All' in Nuke Deal

Senior US envoy Sydney Seiler visits Beijing Tuesday for talks on how to revive the stalled six-party nuclear talks with North Korea More

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
US Calls Fight Against Human Trafficking a Must Wini
X
July 28, 2015 12:21 AM
The United States is promising not to give up its fight against what Secretary of State John Kerry calls the “scourge” of modern slavery. Officials released the country’s annual human trafficking report Monday – a report that’s being met with some criticism. VOA’s National Security correspondent Jeff Seldin has more from the State Department.
Video

Video US Calls Fight Against Human Trafficking a Must Win

The United States is promising not to give up its fight against what Secretary of State John Kerry calls the “scourge” of modern slavery. Officials released the country’s annual human trafficking report Monday – a report that’s being met with some criticism. VOA’s National Security correspondent Jeff Seldin has more from the State Department.
Video

Video Iran Nuclear Pact Wins Few New US Congressional Backers

Later this week, President Barack Obama returns from a trip to Africa to confront a U.S. Congress roiled by the nuclear accord with Iran, an agreement that has received the blessing of the U.N. Security Council. Days of intensive lobbying and testimony by top administration officials have won few new congressional supporters of the pact. VOA’s Michael Bowman reports.
Video

Video Washington DC Underground Streetcar Station to Become Arts Venue

Abandoned more than 50 years ago, the underground streetcar station in Washington D.C.’s historic DuPont Circle district is about to be reborn. The plan calls for turning the spacious underground platforms - once meant to be a transportation hub, - into a unique space for art exhibitions, presentations, concerts and even a film set. Roman Mamonov has more from beneath the streets of the U.S. capital. Joy Wagner narrates his report.
Video

Video Obama Encourages Kenya to Fix Cultures of Corruption, Discrimination

President Barack Obama bid farewell to Kenya Sunday with a major speech at as stadium outside the capital Nairobi where he called on Kenyans to change the cultures of corruption and discrimination that can hold society back. VOA East Africa Correspondent Gabe Joselow has the story.
Video

Video Europe’s Twin Crises Collide in Greece as Migrant Numbers Soar

Greece has replaced Italy as the main gateway for migrants into Europe, with more than 100,000 arrivals in the first six months of 2015. Many want to move further into Europe and escape Greece’s economic crisis, but they face widespread dangers on the journey overland through the Balkans. VOA's Henry Ridgwell reports.
Video

Video Stink Intensifies as Lebanon’s Trash Crisis Continues

After the closure of a major rubbish dump a week ago, the streets of Beirut are filling up with trash. Having failed to draw up a plan B, politicians are struggling to deal with the problem. John Owens has more for VOA from Beirut.
Video

Video Paris Rolls Out Blueprint to Fight Climate Change

A U.N. climate conference in December aims to produce an ambitious agreement to fight heat-trapping greenhouse gases. But many local governments are not waiting, and have drafted their own climate action plans. That’s the case with Paris — which is getting special attention, since it’s hosting the climate summit. Lisa Bryant takes a look for VOA at the transformation of the French capital into an eco-city.
Video

Video Racially Diverse Spider-Man Takes Center Stage

Whether it’s in a comic book or on the big screen, fans have always known the man behind the Spider-Man mask as Peter Parker. But that is changing, at least in the comic book world. Marvel Comics announced that a character called Miles Morales will replace Peter Parker as Spider-Man in a new comic book series. He is half Latino, half African American, and he is quite popular among comic book fans. Correspondent Elizabeth Lee reports from Los Angeles.
Video

Video California Towns Welcome Special Olympics Athletes

Cities and towns in Southern California are greeting thousands of athletes who are arriving for Special Olympics, a competition for people with intellectual disabilities. The games will run from July 25th through August 2nd. VOA's Mike O'Sullivan reports from Pasadena, California, where athletes from Namibia, Singapore and Tanzania got a rousing welcome from local residents.
Video

Video Critics of Japan Defense Policy Focus on Okinawa

In Okinawa, many locals have long complained that Tokyo places an unfair burden on the tiny island by locating most of Japan's U.S. military bases there. As Japan's government moves toward strengthening and expanding the country's defense policies, opponents of those plans are joining local protesters in Okinawa, voicing concern about where the country is headed. VOA’s Brian Padden reports from Okinawa.
Video

Video IS Uses Chemical Weapons in Syrian Attack

Islamic State militants have added a new weapon in their arsenal of fear: chemical weapons. VOA Kurdish service reporter Zana Omer was on the scene within hours of a recent attack in Hasakah, Syria, and has details of the subsequent investigation, in this report narrated by Miguel Amaya.
Video

Video Historic Symbol Is Theme of Vibrant New Show

A new exhibit in Washington is paying tribute to the American flag with a wide and eclectic selection of artwork that uses the historic symbol as its central theme. VOA’s Julie Taboh was at the DC Chamber of Commerce for the show’s opening.
Video

Video Hoverbike Flying Toward Reality

Another long-standing dream of many technological inventors is quickly approaching reality: U.S.- and British-based firms are cooperating in the development of an individual flying platform they call a hoverbike. They say it may revolutionize the concept of flying, including in the U.S. military. VOA’s George Putic reports.
Video

Video As Japan Expands Defense Role, Protests Follow

The Japanese government is moving forward with a controversial security bill that would authorize the military to fight abroad for the first time since World War II. Leaders say it is critical to defend against rising threats from China and North Korea. VOA’s Brian Padden reports from Japan on the big changes ahead, and the opposition they are drawing.
Video

Video Replacing Poppies with Coffee in Myanmar

The remote mountains of Myanmar’s Shan state are home to the second-largest opium-producing region in the world. After a drop during the 2000s, production surged in the past eight years to feed an increasing demand for heroin in China. But farmers are now making less on the crop, and the U.N. is hoping many will make the switch to growing coffee. Daniel de Carteret reports for VOA from Taunggyi.

VOA Blogs