Details of millions of UK voters accessed by Chinese state, ministers will say

The personal details of millions of voters are believed to have been accessed in an attack by China on Britain’s democratic process, ministers will say. MPs and peers are thought to be among 43 people who the government looks set to confirm have been targeted by cyber-attacks backed by the Chinese state. The UK could impose sanctions on individuals believed to be involved in these acts of state-backed interference, one of which was a separate attack on the Electoral Commission in which Beijing accessed the personal details of about 40…

China targets group of MPs and peers with string of cyber-attacks

China has targeted a group of MPs and peers at Westminster in a string of cyber-attacks, it has been reported. On Monday, the deputy prime minister, Oliver Dowden, is expected to inform parliament of the attacks. Meanwhile, Sir Iain Duncan Smith, former Tory education minister Tim Loughton, cross-bench peer Lord Alton of Liverpool and Stewart McDonald, a Scottish National party MP, have been called on to attend a briefing from Alison Giles, parliament’s director of security. Duncan Smith, Loughton, Alton and McDonald are members of the Inter-Parliamentary Alliance on China…

Hackers for sale: what we’ve learned from China’s massive cyber leak

A massive data leak from a Chinese cybersecurity firm has offered a rare glimpse into the inner workings of Beijing-linked hackers. Analysts say the leak is a treasure-trove of intel into the day-to-day operations of China’s hacking programme, which the FBI says is the biggest of any country. The company, I-Soon, has yet to confirm the leak is genuine and has not responded to a request for comment. As of Friday, the leaked data was removed from the online software repository GitHub, where it had been posted. From staff complaints…

Huge cybersecurity leak lifts lid on world of China’s hackers for hire

A big leak of data from a Chinese cybersecurity firm has revealed state security agents paying tens of thousands of pounds to harvest data on targets, including foreign governments, while hackers hoover up huge amounts of information on any person or institution who might be of interest to their prospective clients. The cache of more than 500 leaked files from the Chinese firm I-Soon was posted on the developer website Github and is thought by cybersecurity experts to be genuine. Some of the targets discussed include Nato and the UK…

Explainer: what is Volt Typhoon and why is it the ‘defining threat of our generation’?

Relations between the US and China – particularly over Beijing’s threats to annex Taiwan – have plummeted in recent years, prompting growing concern about the potential for hostilities or all-out conflict. So recent revelations that a Chinese hacking network known as Volt Typhoon had been lying dormant inside US critical infrastructure for as long as five years have sparked considerable alarm. The network exploited US technological and security weaknesses. But rather than stealing secrets, US and allied intelligence services said it was focused on “pre-positioning” itself for future acts of…

Chinese hackers infiltrated plane, train and water systems for five years, US says

An advanced group of Chinese hackers taking aim at critical US infrastructure has been active for as long as half a decade, American and allied intelligence agencies said in a joint statement on Wednesday. The US National Security Agency, US cyber watchdog CISA, the FBI and the Transportation Security Administration said that the group known as Volt Typhoon had quietly burrowed into the networks of aviation, rail, mass transit, highway, maritime, pipeline, water and sewage organizations. None of the organizations were identified by name, but the statement said that US…

China hacking threatens US infrastructure, FBI director warns, as Volt Typhoon botnet foiled

US officials say they have disrupted a state-backed Chinese effort to plant malware that could damage civilian infrastructure, as the head of the FBI warned that Beijing was positioning itself to disrupt daily life in America were the US and China ever to go to war. The operation disrupted a botnet of hundreds of small office and home routers based in the US that were owned by private citizens and companies that had been hijacked by the Chinese hackers to cover their tracks as they sowed malware. Their ultimate targets…

US ambassador to Beijing targeted in Chinese cyber-attack – report

The US ambassador to Beijing, Nicholas Burns, was reportedly one of the American officials whose emails were accessed in a recent Chinese hacking attack which took Washington by surprise with its sophistication. Another target was Daniel Kritenbrink, the assistant secretary of state for east Asia, the Wall Street Journal reported on Thursday. When the attack was first disclosed last week, the administration admitted the email account of the commerce secretary, Gina Raimondo, had also been compromised. US officials were quoted as saying those were the three most senior targets but…

GCHQ warns of fresh threat from Chinese state-sponsored hackers

The UK’s cybersecurity agency has urged operators of critical national infrastructure, including energy and telecommunications networks, to prevent Chinese state-sponsored hackers from hiding on their systems. The National Cyber Security Centre, part of GCHQ, issued the warning after it emerged that a Chinese hacking group known as Volt Typhoon had targeted a US military outpost in the Pacific Ocean. The so-called Five Eyes intelligence group – the US, the UK, Australia, Canada and New Zealand – issued a joint notice detailing the nature of the Volt Typhoon threat and how…

Microsoft says China-backed hacker targeted critical infrastructure in US and Guam

Microsoft said on Wednesday it had uncovered malicious activity by a state-sponsored actor based in China aimed at critical infrastructure organizations in Guam and the United States. Microsoft said it assessed with “moderate confidence” that this Volt Typhoon campaign “is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises”. Volt Typhoon has been active since mid-2021. Guam is home to major US military facilities, including the Andersen air force base, which would be key to responding to any conflict…