The Biden administration is preparing to publicly accuse Chinese hackers of conducting hacks against US companies on behalf of China’s intelligence service. Plans for criminal charges, sanctions, and a reward for information on the hackers are in place. The hackers are believed to operate at the behest of China’s Ministry of State Security spy agency, using a Chinese technology company as a front to cover their activities. In addition to targeting US organizations, the hackers are also accused of targeting UK organizations. The expected announcement will include identifying the hackers by name and photo.
US-China cyber relations are at a delicate point following FBI Director Christopher Wray’s warning of potential Chinese cyberattacks. Chinese President Xi Jinping assured US President Joe Biden that China would not interfere in the 2024 US election, but US officials are not taking this assurance at face value. Beijing has strongly denied US allegations of hacking and accused the US of conducting its own hacking operations against China. The upcoming announcement is expected to focus on alleged Chinese cyber-espionage rather than disruptive cyberattacks.
The US is expected to name several Chinese individuals as working for a Wuhan-based technology company that conducts hacking operations on behalf of the MSS. Known in the cybersecurity industry as APT31 or Judgement Panda, these hackers have targeted a range of organizations, including US law firms, European industrial organizations, and international apparel companies. Prior to the 2020 US election, hackers associated with the group attempted to break into email accounts of people affiliated with the Biden campaign.
The upcoming announcement will highlight the extent of China’s cyber capabilities as carried out through contractors working for front companies. Last month, leaked documents from a Chinese tech firm revealed victims of the firm’s hacking extending from Tibet to Hong Kong. The firm’s clients included China’s police, intelligence service, and military, as detailed in contracts with the firm. This shows the depth and breadth of China’s cyber operations carried out through various contracted entities.
Overall, the US is ramping up efforts to publicly accuse Chinese hackers of conducting cyber-espionage against US and UK organizations. These hackers, believed to operate on behalf of China’s Ministry of State Security, have been traced back to a technology company in Wuhan. The announcement is expected to reveal the names and photos of the hackers involved in these activities. While China denies the allegations and accuses the US of its own hacking operations, the upcoming move by the US government signals a focus on holding these hackers accountable for their actions. This includes potential criminal charges, sanctions, and rewards for information on their activities.
