News / Asia

US-China Cyber Spying Case Turns Spotlight on Shadowy Unit 61398

Part of the building of 'Unit 61398', a secretive Chinese military unit, is seen in the outskirts of Shanghai, Feb. 19, 2013.
Part of the building of 'Unit 61398', a secretive Chinese military unit, is seen in the outskirts of Shanghai, Feb. 19, 2013.
Reuters
A tense stand-off between the United States and China over state-backed cyber espionage has dragged China's secretive hacking unit “61398” back into focus, after the military group was pinpointed last year for mounting cyber attacks on Western commercial targets.
 
U.S. authorities on Monday charged five Chinese military officers at the unit, accusing them of hacking into American nuclear, metal and solar firms to steal trade secrets. China on Tuesday summoned the U.S. ambassador in Beijing and warned it would retaliate if Washington followed through with the charges. It said the affair would damage “mutual trust.”
 
At the center of the argument is a nondescript tower block in the northern suburbs of China's financial capital Shanghai, home to Chinese People's Liberation Army (PLA) Unit 61398.
 
The 12-story block houses as many as several thousand staff, according to Mandiant, a U.S. cyber security firm recently acquired by global network security company FireEye Inc. Mandiant identified the location as the source of a large number of espionage operations in a 70-page report last year.
 
“This unit is one of the most prolific. The group is really active and very aggressive,” said Pierluigi Paganini, a cyber security expert and founder of Security Affairs, based in Italy.
 
Unit 61398's Shanghai base is kitted out with specialist fiber optic lines, while staff are trained in areas from English linguistics to covert communications, network security and cyber attack strategy, according to the Mandiant report.
 
The unit's operatives, working under code names such as “UglyGorilla”, “DOTA” and “SuperHard”, also have close research and recruitment ties with China's leading academic centers such as the prestigious Shanghai Jiaotong University.
 
Publicly available academic reports, school registers, recruitment notices and local online community notice boards show a web of social, educational and academic networks spreading out from the cyber spying unit. Military units in China are often organized in this way with schools, sports clubs and social events organized communally for unit members.
 
Tip of the iceberg

 
However, unit 61398 - more formally known as General Staff Department (GSD), Third Department, Second Bureau - is just one of dozens of similar groups based in China, and far from the foremost, said Mandiant analyst Jen Weedon.
 
“The unit is one of many and its tradecraft is not that great. They are one of the ones that doesn't seem to mind leaving traces behind,” she told Reuters.
 
The unit, which started operating in or before 2006, saw activity drop sharply in the wake of the 2013 Mandiant report, but has since returned to “business as usual” after it overhauled some of its hacking techniques, Weedon added.
 
The new allegations are that Chinese state-owned firms “hired” the unit, which used a range of cyber attack methods to illegally gather corporate information from mostly U.S. firms and help give Chinese companies a competitive edge.
 
The unit “stole sensitive, internal communications”, using tactics such as “spear phishing” emails to gain access to employees' computers, after which it was able to collect internal data, according to the indictment document, posted on the United States Department of Justice website.
 
Federal prosecutors said the suspects targeted companies including Alcoa Inc, Allegheny Technologies Inc., United States Steel Corp, Toshiba Corp unit Westinghouse Electric Co, the U.S. subsidiaries of SolarWorld AG , and a steel workers' union.
 
Unit 61398 - or at least one very much like it - also stole data from at least one U.S. government agency in a hacking campaign named 'Byzantine Candor', according to diplomatic cables released by Wikileaks.
 
“Hackers based in Shanghai and linked to the PRC's People's Liberation Army [PLA] Third Department” stole data from at least one U.S. government agency, according to a leaked 2008 cable.
 
Officials in Washington have argued for years that cyber espionage is a top national security concern, and the battle is heating up. Both sides have ramped up public and private confrontation, including at a summit last year between U.S. President Barack Obama and Chinese President Xi Jinping.
 
China has denied the unit is involved in cyber espionage, and insists the country is more a victim than a perpetrator of cyber attacks.
 
Paganini said he was not surprised at the latest turn of events, which he described as just the “tip of the iceberg”.
 
“I believe there's an ongoing battle in the cyberspace. These countries are investing large amounts in cyber units that are able to create specific malware and have the ability to get into foreign networks and computers to steal trade secrets and intellectual properties,” he said.

You May Like

Video Russia Accused of Abusing Interpol to Pursue Opponents

Report from member of British think tank says Russian extradition requests keep targets from traveling More

US Lawmakers Weigh Turkish Anti-terror Moves

Turkey’s two-pronged campaign against Islamic State militants, Kurdish PKK forces provokes mixed reactions on Capitol Hill More

What Happens When Americans Eat What They Tweet

You are what you tweet, according to new maps that show a correlation between obesity and tweeting about high-fat foods More

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
Russia Accused of Abusing Interpol to Pursue Opponentsi
X
Henry Ridgwell
July 28, 2015 9:53 PM
A British pro-democracy group has accused Russia of abusing the global law enforcement agency Interpol by requesting the arrest and extradition of political opponents. A new report by the group notes such requests can mean the accused are unable to travel and are often unable to open bank accounts. VOA's Henry Ridgwell reports.
Video

Video Russia Accused of Abusing Interpol to Pursue Opponents

A British pro-democracy group has accused Russia of abusing the global law enforcement agency Interpol by requesting the arrest and extradition of political opponents. A new report by the group notes such requests can mean the accused are unable to travel and are often unable to open bank accounts. VOA's Henry Ridgwell reports.
Video

Video Genome Initiative Urgently Moves to Freeze DNA Before Species Go Extinct

Earth is in the midst of its sixth mass extinction. The last such event was caused by an asteroid 66 million years ago. It killed off the dinosaurs and practically everything else. So scientists are in a race against time to classify the estimated 11 million species alive today. So far only 2 million are described by science, and researchers are worried many will disappear before they even have a name. VOA’s Rosanne Skirble reports.
Video

Video Scientists: One-Dose Malaria Cure is Possible

Scientists have long been trying to develop an effective protection and cure for malaria - one of the deadliest diseases that affects people in tropical areas, especially children. As the World Health Organization announces plans to begin clinical trials of a promising new vaccine, scientists in South Africa report that they too are at an important threshold. George Putic reports, they are testing a compound that could be a single-dose cure for malaria.
Video

Video Special Olympics Athletes Meet International Friends

The Special Olympics are underway in Los Angeles, California, with athletes from 165 countries participating in an event that gives people with intellectual disabilities the chance to take part in an international competition. VOA's Mike O'Sullivan reports that for athletes and their families, it's also an opportunity to make new friends in an international setting.
Video

Video 'New York' Magazine Features 35 Cosby Accusers

The latest issue of 'New York' magazine features 35 women who say they were drugged and raped by film and television celebrity Bill Cosby. The women are aged from 44 to 80 and come from different walks of life and races. The magazine interviewed each of them separately, but Zlatica Hoke reports their stories are similar.
Video

Video US Calls Fight Against Human Trafficking a Must Win

The United States is promising not to give up its fight against what Secretary of State John Kerry calls the “scourge” of modern slavery. Officials released the country’s annual human trafficking report Monday – a report that’s being met with some criticism. VOA’s National Security correspondent Jeff Seldin has more from the State Department.
Video

Video Iran Nuclear Pact Wins Few New US Congressional Backers

Later this week, President Barack Obama returns from a trip to Africa to confront a U.S. Congress roiled by the nuclear accord with Iran, an agreement that has received the blessing of the U.N. Security Council. Days of intensive lobbying and testimony by top administration officials have won few new congressional supporters of the pact. VOA’s Michael Bowman reports.
Video

Video Washington DC Underground Streetcar Station to Become Arts Venue

Abandoned more than 50 years ago, the underground streetcar station in Washington D.C.’s historic DuPont Circle district is about to be reborn. The plan calls for turning the spacious underground platforms - once meant to be a transportation hub, - into a unique space for art exhibitions, presentations, concerts and even a film set. Roman Mamonov has more from beneath the streets of the U.S. capital. Joy Wagner narrates his report.
Video

Video Europe’s Twin Crises Collide in Greece as Migrant Numbers Soar

Greece has replaced Italy as the main gateway for migrants into Europe, with more than 100,000 arrivals in the first six months of 2015. Many want to move further into Europe and escape Greece’s economic crisis, but they face widespread dangers on the journey overland through the Balkans. VOA's Henry Ridgwell reports.
Video

Video Stink Intensifies as Lebanon’s Trash Crisis Continues

After the closure of a major rubbish dump a week ago, the streets of Beirut are filling up with trash. Having failed to draw up a plan B, politicians are struggling to deal with the problem. John Owens has more for VOA from Beirut.
Video

Video Paris Rolls Out Blueprint to Fight Climate Change

A U.N. climate conference in December aims to produce an ambitious agreement to fight heat-trapping greenhouse gases. But many local governments are not waiting, and have drafted their own climate action plans. That’s the case with Paris — which is getting special attention, since it’s hosting the climate summit. Lisa Bryant takes a look for VOA at the transformation of the French capital into an eco-city.
Video

Video Racially Diverse Spider-Man Takes Center Stage

Whether it’s in a comic book or on the big screen, fans have always known the man behind the Spider-Man mask as Peter Parker. But that is changing, at least in the comic book world. Marvel Comics announced that a character called Miles Morales will replace Peter Parker as Spider-Man in a new comic book series. He is half Latino, half African American, and he is quite popular among comic book fans. Correspondent Elizabeth Lee reports from Los Angeles.
Video

Video Critics of Japan Defense Policy Focus on Okinawa

In Okinawa, many locals have long complained that Tokyo places an unfair burden on the tiny island by locating most of Japan's U.S. military bases there. As Japan's government moves toward strengthening and expanding the country's defense policies, opponents of those plans are joining local protesters in Okinawa, voicing concern about where the country is headed. VOA’s Brian Padden reports from Okinawa.
Video

Video IS Uses Chemical Weapons in Syrian Attack

Islamic State militants have added a new weapon in their arsenal of fear: chemical weapons. VOA Kurdish service reporter Zana Omer was on the scene within hours of a recent attack in Hasakah, Syria, and has details of the subsequent investigation, in this report narrated by Miguel Amaya.
Video

Video Historic Symbol Is Theme of Vibrant New Show

A new exhibit in Washington is paying tribute to the American flag with a wide and eclectic selection of artwork that uses the historic symbol as its central theme. VOA’s Julie Taboh was at the DC Chamber of Commerce for the show’s opening.

VOA Blogs