How far can we raise the cyber stakes?
It’s been a busy couple of weeks in the world of cyber security, and it’s been a period that defines the discussion in new ways. Not only did the New York Times directly accuse the Chinese military of hacking activity, the US government released a legal review of its cyber policies which included the ability to order a pre-emptive strike. The two aren’t directly related, but it’s hard to ignore the coincidence of both revelations in the same week, with the stakes in the cyber world being raised yet again.
Over the past decade it’s been hard to escape reports of Chinese hacking of government and private sector computer systems. What makes the New York Times’ hacking worth further examination is the directness and detail of the accusations and what the NYT stands to lose as a business.
To recap, the NYT had been subject to sustained hacking for four months, beginning after the paper published a story in October last year regarding Wen Jiabao’s relatives accumulating several billion dollars through various business dealings during his time in power. The release of this story led to the Chinese government blocking access to the newly launched (June 2012) NYT Chinese language site, and censoring searches for the paper online. In addition, telecommunications company AT & T informed the NYT that it had noticed behaviour ‘consistent with other attacks believed to have been perpetrated by the Chinese military’. It’s not known how the hackers initially accessed the systems, but a ‘spear-phishing’ attack, (an email with an inconspicuous attachment which contains malware) is suspected. The various details of the hacking process are fascinating to read. Read more