Live data from Hacker News

U.S. and key allies accuse China of Microsoft Exchange cyberattacks

axios.com

71–80 of 267 posts

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#72

There is so much doubt in this comment section around the validity of the accusations. We have a number of countries putting forward the knowledge they have mutually agreed upon. What is shared is known to a high degree of certainty. Any details that are questionable would not have been shared prematurely.

China is just the bogeyman of the hour. If it were more politically convenient to blame Russia or Iran you'd suddenly find the same evidence pointing a different way.

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#73

Earlier quoted context omitted.

If someone robbed your apartment would it be convenient to accuse you of low-security procedures instead of condemning the bad actors

If you brought a security door, and the thieves just had to knock on it on the right frequency to open, yes, you would accuse the door seller of fraud.

Locks get picked literally all the time, and nobody sues lock makers. Perfect security does not exist.

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#74

Is this damage control to distract from Israeli companies NSO and Candiru being caught running malware for despots to target journalists and activists? The timing surely is peculiar.

This is maybe the fifth time this year I've seen Israel used as an immediate deflection subject in China-related cybersecurity news posts; is that a trend anyone else has picked up on? just me?

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#75

There is so much doubt in this comment section around the validity of the accusations. We have a number of countries putting forward the knowledge they have mutually agreed upon. What is shared is known to a high degree of certainty. Any details that are questionable would not have been shared prematurely.

China is just the bogeyman of the hour. If it were more politically convenient to blame Russia or Iran you'd suddenly find the same evidence pointing a different way.

[flagged]

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#76

Earlier quoted context omitted.

Due to the level of control the Chinese government imposes on all the corporations within it, is it fair to say that such acts can't be done without the cooperation on some level of the govt? As opposed to many western countries where the companies might be patriotic, but they have minimal fear of taking on the government in general in the courts if they feel they are in the right. Perhaps Chinese companies have the…

No. It is not. China is a big country and the Chinese government does not control everything that is going on. Most hacking is done by kids with computers and uses trivial exploits: easy to guess passwords or security holes that are left unpatched for years after they are documented. Fairly regularly I get a phone call from a guy with a strong accent claiming to be from Microsoft support. No one blames the Indian or…

APT 40 and 31 are well documented [1] [2].

[1] https://www.fireeye.com/blog/threat-research/2019/03/apt40-e...

[2] https://research.checkpoint.com/2021/the-story-of-jian/

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#77
post #74

Is this damage control to distract from Israeli companies NSO and Candiru being caught running malware for despots to target journalists and activists? The timing surely is peculiar.

This is maybe the fifth time this year I've seen Israel used as an immediate deflection subject in China-related cybersecurity news posts; is that a trend anyone else has picked up on? just me?

[flagged]

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#78

It looks like cyber warfare, as well as espionage, is considered pretty much fair game in geopolitics nowadays. I wonder where the line is drawn that would make it an act of war. In any case, a direct attack from the Chinese government towards it's main trade partners (US, Germany and Japan among them) sounds crazy to me.

China goes down, so does aapl and tsla and our entire economy. Until the American voter is more powerful that the collected business interests of those mega-corps, China will be our most favored trade partner, even as they commit war crimes against the American people (in theory :)

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#79

There is so much doubt in this comment section around the validity of the accusations. We have a number of countries putting forward the knowledge they have mutually agreed upon. What is shared is known to a high degree of certainty. Any details that are questionable would not have been shared prematurely.

China is just the bogeyman of the hour. If it were more politically convenient to blame Russia or Iran you'd suddenly find the same evidence pointing a different way.

Russia and Iran do cyberattacks all the time. We have good evidence of these attacks from many sources. Same with China. The idea that these attacks are just being made up or we don't have evidence who executed them is either willfully ignorant (a google search will provide plenty of evidence) or actively malicious.

Re: U.S. and key allies accuse China of Microsoft Exchange cyberattacks

#80

It looks like cyber warfare, as well as espionage, is considered pretty much fair game in geopolitics nowadays. I wonder where the line is drawn that would make it an act of war. In any case, a direct attack from the Chinese government towards it's main trade partners (US, Germany and Japan among them) sounds crazy to me.

I don't think it's crazy at all. We (i.e. the US) use our SIGINT abilities to spy on allies all the time, or at least according to numerous books and leaks. With that said, I'm not sure that the US government considers China an ally.

Yes, and that includes stealing trade secrets from European companies, which are nominally US allies.
Post reply on HN