The recent cyberattack on the Federal Office of Cartography and Geodesy (BKG) in Germany has been officially attributed to Chinese state actors following a thorough investigation by security authorities. This attack, which occurred at the end of 2021, was condemned by the federal government as an act of espionage.
Reports from Bmi Bund revealed that Chinese cyber actors compromised end devices belonging to private individuals and companies to use them as part of obfuscation networks for their attack on the BKG. The breach was detected with the help of the Federal Office for the Protection of the Constitution (BfV) and the Federal Office for Information Security (BSI), which played crucial roles in supporting the BKG during the cyberattack.
The Federal Foreign Office led the national attribution procedure with the backing of these security authorities, highlighting the collaborative effort to identify and address the threat posed by Chinese state-sponsored cyber actors. The severity of the attack prompted Federal Minister of the Interior Nancy Faeser to issue a strong condemnation and call for action against such cyber threats.
Minister Faeser emphasized the danger posed by Chinese cyberattacks and espionage, stating that they threaten the digital sovereignty of Germany and Europe. She urged China to refrain from engaging in such activities and emphasized the need for enhanced cybersecurity measures to protect against future attacks. The government recently introduced a new law to bolster cybersecurity efforts in response to the growing threat landscape.
In the wake of the cyberattack, the BKG implemented a series of measures to enhance its information security, including improving event logging and detection, IT risk management, and raising employee awareness about information security. Following recommendations from the BSI, the BKG network was rebuilt to exclude the attackers successfully.
The Federal Office for the Protection of the Constitution remains vigilant in monitoring and addressing the ongoing threat posed by Chinese cyber actors. Recent cyberattacks targeting various entities in Germany have highlighted the need for continued vigilance against state-sponsored espionage and influence activities.
Security authorities anticipate that China will escalate its offensive cyber strategy to further its industrial and geopolitical goals in the coming years. As such, organizations and government agencies must remain proactive in their cybersecurity efforts to defend against future cyber threats.
Overall, the attribution of the cyberattack on the BKG to Chinese state actors underscores the evolving nature of cyber threats and the importance of international cooperation in addressing them. By enhancing information security measures and remaining vigilant against emerging threats, Germany and other nations can strengthen their defenses against malicious cyber activities.