View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
  2. Cybersecurity
September 10, 2012

Chinese hackers target US defense companies, human rights groups: Symantec

The hackers were never publicly identified and the cyber attacks against US institutions originated from China

By CBR Staff Writer

The China based hacker group which attacked Google in 2009, has launched hundreds of other cyber assaults since then, concentrating on US defense companies and human rights groups, according to new research from Symantec.

In January 2010, Google had threatened to end its operations in China after a cyber attack targeted Chinese human rights activists.

About 20 other organisations were also targeted in the cyber attack later dubbed Operation Aurora from China-based hackers who have reported to have stolen the intellectual property.

The hackers were never publicly identified and the cyber attacks against US institutions originated from China raised tensions between Washington and Beijing.

Symantec research group manager Eric Chien said that it was big news at the time, but what people don’t realise is that this is happening constantly.

"They haven’t gone away, and we wouldn’t expect them to go away," Chien said.

Symantec said that the hackers behind Operation Aurora have concentrated on stealing design documents from defense contractors and their suppliers which include shipping, aeronautics, arms, energy, manufacturing, engineering as well as electronics companies.

Content from our partners
Unlocking growth through hybrid cloud: 5 key takeaways
How businesses can safeguard themselves on the cyber frontline
How hackers’ tactics are evolving in an increasingly complex landscape

The hackers used components of a common infrastructure that Symantec termed the "Elderwood Platform".

Symantec said that the second most common group of targets was non-government organisations involved in Tibetan human rights issues and financial firms as well as software companies were also targeted.

Symantec claims that the Elderwood hackers alone have used eight zero-day vulnerabilities from 2010 to 2012, which is the largest number it has seen from a single organisation.

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how New Statesman Media Group may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.