China Hacked HPE, IBM and Then Attacked Clients, Report Finds (reuters.com) 59
An anonymous reader quotes a report from Reuters: Hackers working on behalf of China's Ministry of State Security breached the networks of Hewlett Packard Enterprise and IBM, then used the access to hack into their clients' computers, according to five sources familiar with the attacks. The attacks were part of a Chinese campaign known as Cloudhopper, which the United States and Britain on Thursday said infected technology service providers in order to steal secrets from their clients. While cybersecurity firms and government agencies have issued multiple warnings about the Cloudhopper threat since 2017, they have not disclosed the identity of technology companies whose networks were compromised. IBM said it had no evidence that sensitive corporate data had been compromised. HPE said it could not comment on the Cloudhopper campaign.
Cloudhopper targeted managed service providers (MSPs) to access client networks and steal corporate secrets from companies around the globe, according to a U.S. federal indictment of two Chinese nationals unsealed on Thursday. Prosecutors did not identify any of the MSPs that were breached. Cloudhopper, which has been targeting technology services providers for several years, infiltrated the networks of HPE and IBM multiple times in breaches that lasted for weeks and months. Reuters was unable to confirm the names of other breached technology firms or identify any affected clients. Both IBM and HPE provided statements but declined to comment on the specific claims made by the sources. "The security of HPE customer data is our top priority," HPE said. "We are unable to comment on the specific details described in the indictment, but HPE's managed services provider business moved to DXC Technology in connection with HPE's divestiture of its Enterprise Services business in 2017."
"IBM has taken extensive counter measures worldwide as part of its continuous efforts to protect itself and its clients against constantly evolving threats," the company said in an emailed statement. "We take responsible stewardship of client data very seriously and have no evidence that sensitive IBM or client data has been compromised."
Cloudhopper targeted managed service providers (MSPs) to access client networks and steal corporate secrets from companies around the globe, according to a U.S. federal indictment of two Chinese nationals unsealed on Thursday. Prosecutors did not identify any of the MSPs that were breached. Cloudhopper, which has been targeting technology services providers for several years, infiltrated the networks of HPE and IBM multiple times in breaches that lasted for weeks and months. Reuters was unable to confirm the names of other breached technology firms or identify any affected clients. Both IBM and HPE provided statements but declined to comment on the specific claims made by the sources. "The security of HPE customer data is our top priority," HPE said. "We are unable to comment on the specific details described in the indictment, but HPE's managed services provider business moved to DXC Technology in connection with HPE's divestiture of its Enterprise Services business in 2017."
"IBM has taken extensive counter measures worldwide as part of its continuous efforts to protect itself and its clients against constantly evolving threats," the company said in an emailed statement. "We take responsible stewardship of client data very seriously and have no evidence that sensitive IBM or client data has been compromised."
Re: (Score:2)
How did the US/UK espionage find this out, oh, they noticed the extra traffic whilst they were doing the exact same thing and you just know that is true. How did they track it in China, well, of course because they were hacking servers in China. It's not like they can reach for the global treaty to block these attacks and blocks global propaganda services, why because the US don't want them because they want to hack and propagandise the entire rest of the planet, to serve US citizens, absolutely not, to ser
Re: (Score:3)
Well, I fine upstanding nation like China will surely abide by any treaty you think you have signed with it.
Unforgivable (Score:3)
This is unforgivable, in terms of IBM and HPE.
They stored client details in a manner that hacked credentials could access them? IBM and HPE could be up for millions, if not billions, in damages here. Client details should be amongst the most secure credentials they have. As a senior technical consultant, my credentials at my clients are usually second only to their system administrators. If they leaked out, it would be catastrophic!
Would not want to be at HPE or IBM right about now...
Re: Unforgivable (Score:3, Insightful)
I wouldn't want to work at HPE / DXC anyways. Nastiest vendor I've ever met.
Alligator eats alligator. It's like the swamp version of a turducken.
Re: (Score:3)
I wouldn't want to work at HPE / DXC anyways. Nastiest vendor I've ever met.
So sad. For most of its long life, Hewlett-Packard was the epitome of honesty and straight dealing.
Re: (Score:2)
CLOUDFUNNEL (US work done in the UK).
Re: Unforgivable (Score:2)
Why bother hacking? (Score:1)
When a large chunk of IBM is based in China? They donâ(TM)t need backdoors. They have the keys to the front door because they were hired to build it....
How is this not an act of war? (Score:2, Interesting)
At what point does the US say 'enough', and punches back twice as hard?
Re: (Score:3)
Re: (Score:2)
Wrong. We actually have them caught red handed. You don't know shit about this, that's true.
Please give concrete evidence of those statements.
Otherwise we shall have to conclude that you are making them up and know nothing.
Re: (Score:2)
First, you would need to prove this is an attack by the state, not by some random hacker group.
I'm still trying to find who claims this is coming from China and see what exactly they are talking about. So far ... I couldn't find anything.
Re:How is this not an act of war? (Score:4, Informative)
So this seems to be the origin : https://www.pwc.co.uk/cyber-security/pdf/cloud-hopper-report-final-v4.pdf [pwc.co.uk]
Mentioning a probably-China-based "APT10" group, based on the time of most attacks.
"CloudHopper" is the codename PwC gave to the APT10 attack, not a secret service code name.
Re: (Score:2)
As soon as asshole leaves office and Putin has not cock-holster running the U.S.
Re: (Score:2)
Psy-ops by UK - US Deep State Actors .. (Score:2)
The Truth About Cambridge Analytica-SCL: Psy-ops by UK-US Deep State Actors [globalresearch.ca]
“Its ‘hard sell’ was a demonstration of how the UK government could use a sophisticated media campaign of mass deception to fool the British people into the thin
Re: (Score:3)
Cambridge Analytica and SCL: How I peered inside the propaganda machine [emma-briant.co.uk]
Cambridge Analytica staff set up new firm [bbc.co.uk]
“we must look first at Cambridge Analytica [parliament.uk], LLC
With journalistic integrity like this... (Score:1)
"Reuters was unable to confirm the names of other breached technology firms or identify any affected clients. "
"The sources, who were not authorized to comment on confidential information gleaned from investigations into the hacks"....
I now announce from my basement that I have found the cure for all cancers but I can't tell you how or give you any proofs.