China Behind 96% of All Cyber-Espionage Data Breaches, Verizon Report Claims 96
colinneagle writes "Verizon's 2013 Data Breach Investigation Report is out and includes data gathered by its own forensics team and data breach info from 19 partner organizations worldwide. China was involved in 96% of all espionage data-breach incidents, most often targeting manufacturing, professional and transportation industries, the report claims. The assets China targeted within those industries included laptop/desktop, file server, mail server and directory server, in order to steal credentials, internal organization data, trade secrets and system info. A whopping 95% of the attacks started with phishing to get a toehold into their victim's systems. The report states, 'Phishing techniques have become much more sophisticated, often targeting specific individuals (spear phishing) and using tactics that are harder for IT to control. For example, now that people are suspicious of email, phishers are using phone calls and social networking.' It is unknown who the nation-state actors were in the other 4% of breaches, which the report says 'may mean that other threat groups perform their activities with greater stealth and subterfuge. But it could also mean that China is, in fact, the most active source of national and industrial espionage in the world today.'"
The report also notes that financially-motivated incidents primarily came from the U.S. and various Eastern European countries.
I must admit a begrudging respect for China (Score:5, Funny)
I kind of envy having a government so willing to go to bat for its native industry that it's willing to go as far as to steal IP for them. In my country, the government is more than happy to sit back and watch all its industries outsource and lay off everyone, and nationalism is regarded as a bad word. China, if nothing else, believes in China.
Re:I must admit a begrudging respect for China (Score:4, Funny)
they just have so many people and not so many things to order them to do. but imagine the disappointment when they spend two man years to phish something trivial they then notice they already had since they had been producing the fucking thing for five years!
aaanyhow.. even westerners would be better off bouncing their attacks through china.
Re: (Score:1)
Re: (Score:1)
Sit back and watch! Who are you kidding, we don't sit back and watch we provide significant tax incentives dammit! Move it, move it, get those jobs out of here!
Re:I must admit a begrudging respect for China (Score:4, Insightful)
You're drawing a false distinction between China's government and it's industries. Companies in China essentially *are* part of the government.
Re: (Score:3, Interesting)
What makes you think the US isn't doing the same? There have been complaints from European companies for decades that the US was spying on them, and it is safe to assume that anything worth stealing that China develops would be a target as well.
There was an article today about how China is well ahead of the US in renewable energy. China is deploying a deep water thermal differential power plant, the largest of its kind. China has faster trains than anything in the US, even if the signalling system isn't so
Re: (Score:3)
In the US, it is largely left up to the private industry. Any US spying, stays mostly in govt hands, things learned by the US govt isn't given freely to US industries.
The opposite is true in these other countries.
Re: (Score:1, Troll)
The difference is, in countries like China (and I think #2 is actually Israel, or at least they used to be WAY up there in espionage in the US)...it is state sponsored.
In the US, it is largely left up to the private industry. Any US spying, stays mostly in govt hands, things learned by the US govt isn't given freely to US industries.
Pure speculation, and not even "good" speculation. The fact is, you know very little about what the US Government does with it's data. The reason for this is that nearly all of the spying we do is classified as State secrets. I'd bet you a dozen donuts that the US does way more spying than China. Maybe not domestically, but our foreign espionage would dwarf China.
The difference is really, that you are told that China is full of bad guys. You are told that the US is full of heroes saving the world from
Re:I must admit a begrudging respect for China (Score:5, Insightful)
Your whole reply was pure speculation, unless the government has been giving you the memos, stop reading Mother Jones. You whole argument is that (1) you don't know what the government is doing, (2) therefore it is lying to you. Brilliant, Einstein.
Re: (Score:2)
I never claimed the Government was lying, I said that it's a fact our Government spies on people and we have no facts due to classifications for nearly every aspect of our espionage. Therefor, mister lack of basic English reading and comprehension skills, I did not speculate.
Me pointing out facts without the propaganda you normally get does not make my facts incorrect. It makes you look like an imbecile.
You believethat the US spying is all for the greater good. I make no such assumption. I never assumed
Mod point fail (Score:2)
Re: (Score:2)
What makes you think the US isn't doing the same? There have been complaints from European companies for decades that the US was spying on them...
heh, I was talking with someone, Japanese-American, and she remembered way back when the Germans complained, "US takes our first-class scientists, Soviets take our second-class scientists, and we're stuck with third-class scientists!"
Re:I must admit a begrudging respect for China (Score:5, Informative)
You've seen the stories over and over. Like how the Chinese government required Siemens to contract with Chinese companies to manufacture high speed trains, then once the companies had "acquired" enough technical knowledge to do it themselves they dumped Siemens. It makes me facepalm every time I read about some naive Western tech company eager to do business in China bending over backwards to please the Chinese government, like lambs to the slaughter, thinking that a few pieces of paper promising their IP is safe will protect them.
In the late 20th century, this behavior was pretty much localized to the region. But now with the Internet, the behavior can reach around the globe. Those of you who think Western companies are the epitome of evil are in for a rude shock, once you see the no-holds-barred style of capitalism practiced in the East.
Re: (Score:2)
I kind of envy having a government so willing to go to bat for its native industry that it's willing to go as far as to steal IP for them. In my country, the government is more than happy to sit back and watch all its industries outsource and lay off everyone, and nationalism is regarded as a bad word. China, if nothing else, believes in China.
China is playing the Long Game, they've been at it for thousands of years. It should be no surprise you hear them say one thing while they vigorously do another, the hacking into Ameirican servers are merely there to throw the US off balance. Ultimately there is an opport
Oh we love, love, love Chairman Mao!
He's our saviour, our martyr, moral compass and soul
We dream about him with each rice bowl!
All the time he took, writing his little red book
How much better he was than that old KMT schnook
Oh, we love, love, love Chairman Mao and howwwww!
unity to learn the weaknesses of western systems to build better defences against attacks.
Re: (Score:3)
Re: (Score:2)
The One Child policy for instance has created an enormous glut of working age people with few dependents that will become a tremendous burden on the country when they reach retirement age.
When you've got 1.3 billion people in a country the size of the US, overpopulation is a much bigger long term issue than having a high retiree/worker ratio for a while. If your productivity increases enough, a given number of retirees will actually be less of a burden on a smaller but more productive work force than they would be on a larger but less productive workforce. What do you think noodle robots are for?
The One Child policy combined with traditional values is also creating a tremendous imbalance in the genders, with almost 20% more boys than girls born.
That's a different story, though AFAIK the government's problem arises from an inability to stop
Re: (Score:2)
Re: (Score:2)
unity to learn the weaknesses of western systems to build better defences against attacks
Why bother? Big countries more readily destroy themselves than they can be attacked from the outside. That's how the US won the Cold War. Truman announced a containment strategy and eventually the USSR just imploded. Takes longer but it gets a lot fewer people killed that a hot war.
The US is happily destroying itself with its short-term self-parasitic thinking. Undoubtedly China will find a way to destroy itself from within (as it has many times in the past).
Re:I must admit a begrudging respect for China (Score:4, Insightful)
People joke and laugh about Chinese aggression, but please never forget, China is the oldest nation on the planet and arguably the second largest in size (depending on definition).
They have arguably existed in continuous (but evolving) national form since approximately 200 BC -- possibly longer if you consider the Qin takeover a civil war and treat the dynasties as more western city states.
You don't last 2000+ years as a nation without a long term plan.
I don't want to be fearmongering about Asian cultures -- but it is important to pay a potential foe respect where it's due. China knows what they're doing.
Also don't forget modern China is mostly populated and run by Han Chinese. Many of the earlier tribes of China were driven out by Han expansion and presently populate Southeast Asia and Japan. In claiming Tibet the government has effectively declared it lebensraum. Tibetans are already a minority in their own land.
Re: (Score:2)
Many of the earlier tribes of China were driven out by Han expansion ...
Somewhat like the Americans drove the Indians they didn't kill off onto reservations.
Re: (Score:2)
Yes, just like that.
Re:I must admit a begrudging respect for China (Score:5, Insightful)
You don't last 2000+ years as a nation without a long term plan.
China has fallen apart, and been glued back together, many times in the last 2000+ years. Emperor/Chinese party gets too greedy, peasants revolt, place falls apart for a few centuries, new peasant leader comes along and makes himself emperor (e.g. Mao) and it stays glued together for some time, until the cycle repeats.
I'll buy that they're thinking longer term than the US, but that's also true of a hyperactive three year old. No country thinks 2000 years ahead. BTW Egypt has been around a lot longer and has at least as good of a claim to continuity.
Re: (Score:3)
They have been at it for +2000 years and they still come in 2nd place to a country that has been a going concern for 250 years. China is facing the inevitable consequences of creating a growing economy. Their only advantage in world trade has been their reliance on cheap labor and not quality or innovation. This is why China is borrowing technology from everyone and not giving a damn about things such as patents. They now have to compete with other countries in South East Asia because they also can use lowe
Re:I only have one question... (Score:5, Interesting)
I realize you were probably asking this in jest, but Verizon Business Security is independent of their cell phone business. What happened is their investigators got pretty darn good at rooting out hackers, both internal and external. Helping customers find external hackers in their networks led them to offering these investigation services to other corporations. I'm pretty sure that their security team is a profitable self-sustaining division these days.
The most important thing to the rest of us is they created a schema for recording incidents, and they publish the data (after anonymizing it.) With the number of investigations they perform, it becomes a statistically significant source of information about breaches, which had been a real black hole of information before.
Most companies are reluctant to announce anything about their breaches. They're always negative publicity, they lead to accusations of wrongdoing or incompetence, and they may reveal other sensitive internal information about the kinds of data they keep. By being anonymized through the DBIR, we all get to learn much more about the threat landscape without being able to blame a specific company for a specific loss.
This doesn't sound right? (Score:2)
What part of Nigeria is China in?
Re: (Score:1)
Apparently quite a few parts [vanguardngr.com]... Try some of these fine Cassava chips...
Cyber-espionage is Bad (Score:2)
the bigger (network) picture (Score:2)
Verizon's own track record? (Score:2)
Serious question.
Any takers?
Comment removed (Score:5, Funny)
Re: (Score:2)
And thanks for explaining why my state and local governments can't even come up with the money to fix potholes -- they're spending it all shredding the Constitution and sending the rest to Israel!
--
Good people go to bed earlier.
(really good people take their meds *every* night!)
It's not like it is difficult. (Score:2)
How many companies in the US have branches in China? How many of those put any kind of firewalling, other than any-any in the VPNs connecting those branches? Yup.
Just because it's a target attack does not mean (Score:1)
Just because they are siphoning up and stealing our tech secrets doesn't mean they don't love us.
Or at least our money.
Block all of China? (Score:5, Interesting)
I have a dumb question: If your company does not depend on doing business with China, why not block their entire country within your firewall? My current company has no dealings with China, so I've blocked their national IP address range. My spam/attacks have gone down almost 90% since doing so. I did the same with Russia and most of the former Soviet nations.
Re: (Score:1)
DenyHosts Report (Score:5, Informative)
[repeat dozens of times per day]
At some point, you realize that the only time you ever communicate with that part of the Net, is when you're receiving an attack of some sort. Before long, "The Great Firewall of China" isn't going to be something installed by the Chinese government; it's something the rest of us will have done.
Hmm... maybe that was the government's devious plan to combat internal dissent and external influences, all along!
Re: (Score:2)
Yup, sounds like a remarkably effective and easy plan. Many computers there have Windows "so [they] could be useful" [slashdot.org], and 5 will get ya 10 that they're not "Genuine" and also unpatched, so China can take control of them and send attacks through them (or just change the logs on the hacked PC to trace back to the compy of the unsuspecting Evil Capitalist Pig who said one too many bad words about their boss-slash-covert domestic spy on social_media_outlet). The CCP has Evidence(tm) to forced-labor the Pig, U
I'll be curious to know... (Score:2)
China may just be a stepping stone for Hackers. (Score:2)
Maybe, maybe not. (Score:2)
This story may well be true, but I'm going to have to hear it from someone other than Verizon. They have not proven to be a reliable source of information about anything.
Re: (Score:2)
Yes. They work for Verizon. As long as their funding comes from Verizon, their first mission will be to serve Verizon. If you think their disclaimer, their admission of bias, is a reason to trust them, you're making a mistake.
Especially about issues regarding security, it's never a good idea to trust people who have an agenda that is not directly tied to anyone's security but theirs.
Once and for all: corporate ways are not our ways. corporate benefit is n
Re: (Score:2)
Could you cite the reason you distrust the DBIR?
Well for me it's the politically motivated weasel words: "China was involved in 96% of all espionage data-breach incidents"
This means even if it was a Repulsive Russian or Clever Canadian hacker using a Chinese box as a relay, and a toolkit that Chinese folk have used before then "China" was "involved". Which is bullshit.
Let me tell you of a story of the town that has the highest drug related arrests in the county: I was pulled over for speeding, and briefly arrested for possession of drugs. I was trave
Easy solution (Score:2)
Admittedly not at all sufficient, but it really should be a default.
Russians and Eastern Europeans on vacation? (Score:2, Insightful)
Sorry. Just a little skeptical here. I don't doubt that China does its share, but I'm guessing that it's pretty easy to make it look like an attack is coming from China even if it originates from Boise, Idaho.
Re: (Score:2)
Re: (Score:2)
Re: (Score:1)
If it's from Verizon, I do not believe it (Score:2)
... since even Verizon is involved in the scam operations of TTI National (they own this company that does false billing of fake accounts).
Re: (Score:2)
Just blocking access from China to your network?
But then the world's hackers will just use proxies in other countries -- Especially the Chinese ones, who do this anyway...
What? (Score:1)
Do they get much benefit from it? (Score:2)
How much percentage points of GDP growth do they have more than if they didn't do this cyber espionage, I'm wondering?
For example, does hacking into a high-tech factory's servers allow them to immediately create a duplicate factory with trained staff that functions just as well?
I must be stupid (Score:1)
This poses a question (Score:2)
didn't you watch TV 40 years ago? (Score:2)