In a recent update, the Department of Justice (DoJ) has announced that they have charged five Chinese and two Malaysian hackers for targeting more than 100 companies in the US and around the world. These companies included businesses involved in gaming, finance, telecommunications, and the defense sector.
The individuals responsible for the cyberattacks have been identified as Zhang Haoran, Tan Dailin, Jiang Lizhi, and Qian Chuan, who are all Chinese nationals, and Wong Ong Hua and Ling Yang Ching, who are Malaysian nationals. Additionally, the fifth Chinese national, named Gu Genyu, is still at large.
The indictment accuses these individuals of establishing an online company that specialized in crafting and selling malicious software known as Remote Access Trojans (RATs). The RATs would allow the hackers to gain access to their targets’ computers and render them vulnerable to data theft, encryption, and surveillance.
The operation carried out by the indicted hackers is believed to have been going on since 2014. The collective victims of the attacks include government agencies, universities, international organizations, and multiple American and foreign corporations. The hackers allegedly distanced themselves from the cyberattacks through fake identities, spoofing, and stolen VPN accounts.
The indictment documents describe how the hackers used targeted cyber espionage techniques to steal valuable information, such as confidential business plans, technology blueprints, and customer data. The stolen data was later exploited for personal or financial gains, including the selling of compromised software and data to clients.
In one such instance, Chinese hackers are said to have stolen a massive amount of data from American aerospace manufacturer Boeing to develop a prototype of a Chinese-built airplane. The accused are also expected to face charges related to the theft of COVID-19 research data from multiple organizations in the US, including a pharmaceutical company based in Massachusetts.
The US government’s announcement of these charges coincides with an escalation of diplomatic tensions between the US and China. These tensions have persisted throughout the ongoing pandemic and have companies concerned about the risk to their security and intellectual property.
Authorities have urged businesses to increase their vigilance against cyberattacks and to adopt stringent cybersecurity measures. They believe that by adopting these measures, companies can prevent themselves from falling victim to such coordinated attacks.
The US Deputy Attorney General, Lisa Monaco, has emphasized that the DoJ will always hold hackers accountable, no matter where they are in the world. She added that the recent joint action by the FBI, CISA, and the National Security Agency (NSA) shows the US’s commitment to combatting cyberattacks that undermine America’s economy, national security, and public safety.
This recent crackdown has highlighted the growing need for companies to prioritize cybersecurity and adopt better protection measures. Cybercrime has become a prevalent issue in recent years. The pandemic and the resulting shift towards remote working have created even more opportunities for cyberattacks, making it more vital than ever for organizations to have robust cybersecurity protocols in place.