Kaspersky Lab Uncovers Cyber-Espionage Plot By Russian and Chinese HackersSusanne Posel, Contributor Encrypted files and decryption keys used by the European Union and NATO have been compromised. The countries under attack are: The Russian Federation Kaspersky said: The information we have collected so far does not appear to point toward any specific location; however, two important factors stand out: The exploits appear to have been created by Chinese hackers, (and) the Rocra malware modules have been created by Russian-speaking operatives. Rocra appears to have been controlled by 60 command-and-control servers that were held in Germany and Russia. It is suspected that there is another mother ship server based in an unknown location. For instance, the initial documents are customized to make them more appealing and every single module is specifically compiled for the victim with a unique victim ID inside (and) later, there is a high degree of interaction between the attackers and the victim. Compared to Flame and Gauss, which are highly automated cyber-espionage campaigns, Rocra is a lot more personal and finely tuned for the victims. The software is broken down to continually run within the system until triggered to activate. Examples are stealing information from a connection made by a mobile phone or syphoning mail servers and downloading emails. Although Kaspersky Lab admits that these attacks have not definitively been connected to China or Russia, it is assumed that the data collected would yield a high price on the black market. Kaspersky stated: The information stolen by the attackers is obviously of the highest level and includes geopolitical data which can be used by nation states. Such information could be traded in the underground and sold to the highest bidder, which can be, of course, anywhere. Rocra is able to map out the internal layout of a network and information routes taken by computer software to take files with the use of thumb drives and smartphones. In 2012, the US House Intelligence Committee (USHIC) warned American corporations in a new report against conducting business with two Chinese firms because of national security threats. Both Huawei Technologies and ZTE, two of the worlds largest telecommunications corporations and suppliers of cellular phones and technology are being highlighted by the US government and blamed for cyber-attacks. It is also claimed by the USHIC that they are involved in digital espionage. According to the report, China has the means, opportunity, and motive to use telecommunications companies for malicious purposes. . . . The investigation concludes that the risks associated with Huaweis and ZTEs provision of equipment to U.S. critical infrastructure could undermine core U.S. national-security interests. It is claimed that former industry insiders provided intelligence to the US concerning Huaweis violations of US laws such as immigration, bribery and corruption as well as an alleged pattern and practice using pirated software in its US satellites. The report stated that the Chinese corporations were employing intelligence sources as well as private sector companies and other unnamed entities that could and presumably did steal trade secrets, sensitive information and prehistory data, while simultaneously shipping infected hardware and software to the US with the intent to cause disruptions in national security during war time. Around the same time as the release of the report, an anonymous White House official said there was an attempt to hack into the executive branchs computer system through an unclassified network. No data was removed, proving that this was not an actual hack. The nameless official said that the experiment was spear-phishing. The supposition is that China is behind these attacks because of a phishing expedition against Gmail accounts wherein several senior US government officials and military personnel were affected. According to other mainstream media outlets: hackers linked to Chinas government broke into one of the U.S. governments most sensitive computer networks, breaching a system used by the White House Military Office for nuclear commands, according to defense and intelligence officials familiar with the incident. The official questioned explained that a connection to Bejing in the case of the cyber attack highlights a failure of the Obama administration to press China on its persistent cyber attacks. In January, analysts at the Council on Foreign Relations (CFR) have confirmed that hackers traced to China attacked their system. The drive-by hacking utilized a pirated computer. To compound the problem, the analysts said that the hackers removed their malware and traces of their presence from CFR computer systems. This attack marked a new level by international hackers who aim to steal information from government websites and computers. The drive-by tactic covertly plants malware, then the website itself is used to attack visitors to the site. Visitors can be infected as hackers will them attempt to hack into other computers as visitors are passing by. The hackers use the main site as a watering hole that attracts users to it for the hackers to steal information from their computers. Susanne Posel is the Chief Editor of Occupy Corporatism. Our alternative news site is dedicated to reporting the news as it actually happens; not as it is spun by the corporately funded mainstream media. You can find us on ourFacebook page. linkwithin_text=Related Articles: 