Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

U.S. and key allies accuse China of Microsoft Exchange cyberattacks

axios.com

Post reply on HN
Print view View original

21–30 of 267 posts

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#21

Post by dmix »

> Following Microsoft’s original disclosure in early March 2021, the United States Government also identified other vulnerabilities in the Exchange Server software.

> Rather than withholding them, the United States Government recognized that these vulnerabilities could pose systemic risk and the National Security Agency notified Microsoft to ensure patches were developed and released to the private sector.

Finally they seem to be starting to take the defence of citizens and private industry seriously - in a far more public forum. Instead of just hearing the odd story of this happening through back channels.

From the linked press release:

https://www.whitehouse.gov/briefing-room/statements-releases...

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#22

Post by throwaway4good »

The EU does not accuse the Chinese government of being behind the attacks.

This is the EU press statement:

https://www.consilium.europa.eu/en/press/press-releases/2021...

China: Declaration by the High Representative on behalf of the European Union urging Chinese authorities to take action against malicious cyber activities undertaken from its territory

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#23

Post by [deleted] »

jimmy2020 wrote: post #17
aww_dang wrote: post #13

Earlier quoted context omitted.

https://en.wikipedia.org/wiki/Portcullis

> Portcullises fortified the entrances to many medieval castles, securely closing off the castle during time of attack or siege. Is the US in a state of war with China? Do we need medieval tactics to deal with cyber security? Why insisting on blaming the victim.

[deleted]

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#24

Post by throwaway4good »

throwaway4good wrote: post #22

The EU does not accuse the Chinese government of being behind the attacks. This is the EU press statement: https://www.consilium.europa.eu/en/press/press-releases/2021... China: Declaration by the High Representative on behalf of the European Union urging Chinese authorities to take action against malicious cyber activities undertaken from its territory

An indication that the EU does not believe the probably American intelligence assessment that these hackers operate on behalf of the Chinese government.

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#25

Post by krageon »

throwaway4good wrote: post #24
throwaway4good wrote: post #22

The EU does not accuse the Chinese government of being behind the attacks. This is the EU press statement: https://www.consilium.europa.eu/en/press/press-releases/2021... China: Declaration by the High Representative on behalf of the European Union urging Chinese authorities to take action against malicious cyber activities undertaken from its territory

An indication that the EU does not believe the probably American intelligence assessment that these hackers operate on behalf of the Chinese government.

When the US was angry with Russia everything was suddenly Russians. Now they're being difficult at China, and suddenly China is the country doing everything wrong. That anyone still takes them seriously is to my mind an incredible miracle.

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#26

Post by wyuenho »

throwaway4good wrote: post #22

The EU does not accuse the Chinese government of being behind the attacks. This is the EU press statement: https://www.consilium.europa.eu/en/press/press-releases/2021... China: Declaration by the High Representative on behalf of the European Union urging Chinese authorities to take action against malicious cyber activities undertaken from its territory

Apparently you haven't read it at all

   These activities can be linked to the hacker groups known as Advanced Persistent Threat 40 and Advanced Persistent Threat 31 and have been conducted from the territory of China for the purpose of intellectual property theft and espionage.

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#27

Post by sudosysgen »

throwaway4good wrote: post #22

The EU does not accuse the Chinese government of being behind the attacks. This is the EU press statement: https://www.consilium.europa.eu/en/press/press-releases/2021... China: Declaration by the High Representative on behalf of the European Union urging Chinese authorities to take action against malicious cyber activities undertaken from its territory

So which key allies follow the US accusation? Is the title just wrong?

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#28

Post by mytailorisrich »

throwaway4good wrote: post #24
throwaway4good wrote: post #22

The EU does not accuse the Chinese government of being behind the attacks. This is the EU press statement: https://www.consilium.europa.eu/en/press/press-releases/2021... China: Declaration by the High Representative on behalf of the European Union urging Chinese authorities to take action against malicious cyber activities undertaken from its territory

An indication that the EU does not believe the probably American intelligence assessment that these hackers operate on behalf of the Chinese government.

Not necessarily.

What governments know based on intelligence and what they say publicly are not the same thing. If the EU thinks that making a direct public accusation would be antagonistic and would not serve their interests then they won't make one. That does not mean that they don't know what's going on, don't protect themselves, or even don't retaliate.

This is effectively a PR campaign. What is its purpose? Is it a coincidence that it comes at the same time as this Pegasus/NSO story blows up?

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#30

Post by nabla9 »

This is messy article. There are multiple things happening at once.

Attack vs. espionage are treated differently.

Espionage is done with the intention is to steal information. Espionage is relatively normal between states. Condemn, file charges, then do the same back a them.

Attack is when the intention is to cause harm or coerce. Ransomware, intentionally disrupting or destroying systems. Attacks from foreign government or entities acting behalf of an government are essentially acts of war.

The West is condemning together "mixing" where Chinese government sanctioned groups are doing attacks for financial gain on the side. China should spy responsibly and stop attacks.

Post reply on HN