Slashdot Log In
Government-Sponsored Cyberattacks on the Rise
Posted by
Zonk
on Fri Nov 30, 2007 01:23 PM
from the less-of-a-pr-disaster-too dept.
from the less-of-a-pr-disaster-too dept.
jbrodkin writes "A new McAfee report finds that 120 countries, notably the United States and China, are regularly launching Web-based espionage campaigns. Government-sponsored cyber attacks against enemy countries are becoming more common, targeting critical systems including electricity, air traffic control, financial markets and government computer networks. This year, Russia allegedly attacked Estonian government news and bank servers, while China was accused of hacking into the Pentagon. A McAfee researcher says this trend will accelerate, noting 'it's easier to attack government X's database than it is to nuke their troops.'"
Related Stories
[+]
Russia Accused of Cyber-War Against Estonia 373 comments
earthlingpink writes about the ongoing DDoSing of Estonia. The Guardian is reporting that Russia stands accused of engaging in a three-week-long series of cyber-attacks. Government, banking, and media websites have been targeted. It is unclear whether the attacks are sanctioned or initiated by the Russian Government, but Estonian authorities believe that to be the case. NATO has sent security experts to Tallinn to help beef up defenses. The Estonian defense minister said, "At present, NATO does not define cyber-attacks as a clear military action. This means that the provisions of... collective self-defense, will not automatically be extended to the attacked country... this matter needs to be resolved in the near future."
[+]
Chinese Military Hacked Into Pentagon 405 comments
iFrated informs us of a successful penetration of US Defense Department computers by the Chinese military last June. From the article: "The Pentagon acknowledged shutting down part of a computer system serving the office of Robert Gates, defense secretary, but declined to say who it believed was behind the attack. Current and former officials have told the Financial Times an internal investigation has revealed that the incursion came from the [Chinese] People's Liberation Army. One senior US official said the Pentagon had pinpointed the exact origins of the attack. Another person familiar with the event said there was a 'very high level of confidence... trending towards total certainty' that the PLA was responsible." The PLA is also accused of breaking into German government computers, including a network in the office of the Chancellor.
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Not just that... (Score:5, Funny)
But it's easier on the environment, too!!
How ironic... (Score:3, Insightful)
Re: (Score:3, Insightful)
Re: (Score:2)
Re: (Score:2)
It is easier to attack. But it is not easier to shut down.
Of course it is easier to attack, it is the ARMOR the country's communication system wears. It is what is exposed to attack, so it is easier to attack.
Not exactly surprising! (Score:3, Insightful)
Yet another good reason to keep your computers secure!
Re: (Score:2)
Re: (Score:2)
I could. It's called 'unplugging your computer from the internet'.
Re: (Score:2)
Re: (Score:3, Insightful)
I think this is exactly the point I haven't seen anybody making, but that we're all feeling. If governments are actively engaging in hacking, assuming they find competent hackers, what is to stop somebody from using the tools to hit innocent civilians? Of course they could, of course they might, and maybe planting a little evidence? How would you prove it?
It goes toward that mentality of finding evidence, then getting a warrant. If you think John Citizen might be doing something wrong, you simply use the o
Re: (Score:2)
Or open your computer and copy your HD.
They want it badly enough, they're going to get it.
I'm just surprised to see this now, I mean, it's been months since the news that the USAF is forming a command to conduct cyberwarfare.
I called this yesterday - sort of (Score:2)
Yes, foolish to let other governments have all the totalitarian fun. I'm reasonably certain that the current administration has been using their toys to spy on us all.
It's our fault (Score:2)
Worst excuse in the world, (Score:3, Insightful)
Indeed the United States would be foolish to sit back as others engage in cyberespionage.
I think the activity is more at punking than espionage, in any case.
Finally, a bad analogy on slashdot! (Score:5, Insightful)
This isn't like jumping off of a bridge. There's a breal, tangible benefit here, and if the situation is assymetric, our country would be best off if it were asymmetric in our favor.
Part of our "evil" plan to control the entire world involves us performing acts of espionage against just about every other country.
Every country does it, because that's how a country survives. If there was no such thing as war and terrorism (whatever the cause) maybe that would not be the case. But as long as other countries threaten our position, our livelihood, and even our very existence (and in the nuclear age, yes they do) we're gonna have to collect information through just about every available means. It may not be "nice" but it is a smart move.
Parent
+1, Funny (Score:3, Interesting)
Nothing *evil* about our plans or anyone elses.
because that's how a country survives.
I consider rather that countries survive by learning how to evade history, the hysterical story of global capitalism. See another of my replies to TFA.
Your primary mistake is not to overstate the risk, but to misplace it. *Nations* do not function as discrete moral units in soci
national accident? (Score:2)
Germany, France, and Italy, just to name a few examples, are nations where political boundaries are more or less ge
Hopefully, (Score:2)
quantum truth effects (Score:3, Funny)
We are dealing in the interactions of collections of particles called beings; rather, collections of those collections.
Your comment floored me, but on second glance it is at once right as rain and false as a wooden nickel.
which is better? (Score:5, Insightful)
Re: (Score:2)
Re: (Score:3, Interesting)
Completely not joking, a physical attack is better and heres why. Physical destruction of lives and things pisses off the populace. People will get up in arms about ending the war and making peace. If its "just" some cyber attacks people will be apt to let it go on a long time or indefinitely being a constant strain on the economy. The economy as you know is what feeds us. If cyberwar destroys the economy to the point where unemployment is riding high thats much worse off than a few thousand killed bef
Re: (Score:3, Interesting)
Economies are far more easily rebuilt. Placing an economic system above lives is utterly naive and shows a complete lack of self-sufficiency, IMO.
If the concern over economic collapse through hack attack
Huh? (Score:3, Interesting)
I'm completely not understanding how the linked article is derived from this "McAfee's Virtual Criminology Report". The version I'm seeing has nothing to do with "government-sponsored cyberattacks" and doesn't contain this quote.
Storm Worm (Score:2)
Re: (Score:2)
No (Score:5, Insightful)
Hollywood managed to persuade everyone that with a few million dollars and a rock-star hacker it is possible to break into the most secure systems. The fact is that when sysadmins have been doing their jobs, it is easier to conduct a physical attack than a networked one. Do you think that electronic money could exist otherwise ?
Re:No (Score:4, Interesting)
However, most of us know that many networks are vulnerable to attack because they're neither correctly set-up nor are their admins doing their jobs. In these cases, even a no-talent script kiddie could break in easier than a government could launch a nuclear attack.
Parent
No (Score:2)
1) If you fail, you don't die.
2) Nobody notices when you succeed, and you're free to do whatever with the information you've got.
If someone notices you've failed (or succeeded), you're likely to be prosecuted in your country of residence. Unless you're hacking for the government, in which case... exactly nothing happens.
Wheras if you fail at dropping a nuke (i.e. the nuke somehow gets destroyed by a "missile defense system") you die. Quickly.
However, comma ... (Score:2)
How many government networks do you suppose are correctly set up? Nevermind commercial networks, which don't even have the benefit of government standards on securing their systems.
RTFR! (Score:4, Informative)
(Note that I'm not asserting that the US is not conducting electronic espionage. I would hope that we are. Heck, we did electronic espionage long before the internet; why should we stop now?)
Re: (Score:2, Informative)
Indeed, this is not new... (Score:4, Insightful)
Estonia got hammered, probably by Russia. That Russia contracted a stormbot net merely qualifies it as a mercenary attack. Think Bay of Pigs, with a lot more deniability.
China-based machines have been spotted trying all sorts of hijinks against targets worldwide. Not that China-based machines are alone in this, but they seem to be pretty aggressive.
When I was younger, I dreamt up interesting warfare. Why use Anthrax when a decent influenza mutant gave you deniability and a very debilitating attack. Use something like Salmonella, and give the population diarreah. A cleanup of fairly massive proportions. As part of the strategy, hit Atlanta with the Salmonella, and Phoenix, and watch the water problems escalate. Influenza would be best used in metropolitan areas, since it would be indistiguishable from a genuine pandemic.
Cyberwar offers states deniability, subterfuge, and targeted attacks at economic and industrial resources. Wonderful way to cripple your opponent on their own soil, and then run circles around them snarfing up territory, influence, or just plain good press while the losers suffer in every other way.
Once upon a time, you knew who your enemy was - they were slashing, shooting, or bombing you. then it got harder to figure out where they were. Then it got harder to figure out WHO they were.
From now on, it will be harder to figure out if you're really under attack, until it's too late.
I suspect our military will be taking more and more systems off-Net, to completely prevent attacks. Then our adversaries will go after the softest parts of the military systems: Communications - satellites for instance. Logistics - civilian systems the military depends on. Political Systems - including the media, elections.
We are close to fighting an invisble enemy, with uncertain targets, in a neverending low-grade conflict that saps our resources and diverts our attention from greater threats and opportunities.
Time to start giving tax breaks to onshore manufacturers again. We cannot continue to import most of our critical technology from our avowed and hostile enemies.
Re:Indeed, this is not new... (Score:5, Insightful)
Low-grade, untraceable and deniable attacks are a fact of life with electronic communications. We can either make sure that everyone has a stake in the overall health of the world economy, or we can start a wonderful cycle of isolationism, paranoia and "us vs them" attitude. Personally, I know which way I tend.
Parent
Here's a thought (Score:3)
Re: (Score:2)
You mean like the SIPRNet [wikipedia.org]? And just because you're working on military computers doesn't mean you aren't working with COTS software and hardware. There are far too many reasons to list why they'd need the public internet, but with government spending, it's easier to buy two of everything to keep one away from the public.
Re: (Score:3, Interesting)
Not that this is impossible, but it's a lot more difficult than that. Friends that wor
your tax dollars at work? (Score:3, Insightful)
And ... (Score:2)
Countries -- no names -- who think their national identity requires them to be the world's
Great, another ISP excuse (Score:2, Funny)
Me: So, why is my internet out this time?
Tech Support: Um, let me check. (spins the wheel of random technical failures) Looks like acid rain. Sorry.
Me: That's what you told me last time! I think you're lying to me!
Tech Support: Ok, let me check it again. (spins the wheel) Ok, it's actually a government sponsored cyber attack.
Me: Gah.
Re: (Score:2)
Re:Governments Engage in Cyber Warfare! (Score:4, Insightful)
Yeah, thats great, who cares, until your Social Security check doesn't come or your bank account drops to zero.
Parent
Re: (Score:2)
MOD PARENT UP Re:Governments Engage in Cyber Warfa (Score:2, Insightful)
My biggest concern (Score:4, Interesting)
Gotta stop those so-called terrorists, after all.
Parent
Re: (Score:2)
You're saying the GFC is a boner?
Sorry...sorry...couldn't help meself.
Re: (Score:2)
Re: (Score:2, Insightful)
Silly, really, since many people here think that rootkitted non-win servers play a key role in controlling botnets.
They are the 'Generals', whilst the windows boxes are he expendable 'troops'
Re: (Score:2)
SCADA attacks are as old as the hills.
Re: (Score:3, Insightful)
Infiltrating other government networks is an act of war. So I don't expect them to actually attack them, any more then I expect a military exercise to actually attack 'enemy' targets.
People like you are exactly the kind of people who are fucking up security.