Chinese police in the northeastern city of Harbin have accused the United States National Security Agency (NSA) of launching “advanced” cyberattacks during the Asian Winter Games in February, targeting essential industries.
Police added three alleged NSA agents to a wanted list and also accused the University of California and Virginia Tech of being involved in the attacks after carrying out investigations, according to a report by state news agency Xinhua on Tuesday.
The NSA agents were identified by Xinhua as Katheryn A Wilson, Robert J Snelling and Stephen W Johnson. The three were also found to have “repeatedly carried out cyberattacks on China’s critical information infrastructure and participated in cyberattacks on Huawei and other enterprises.”
It did not specify how the two American universities were involved.
The US Embassy in China did not immediately respond to an emailed request for comment.
The detailed allegations come as the world’s two largest economies spiral deeper into a trade war that has already spurred travel warnings for Chinese tourists going to the US and halted imports of US films into China.
“The US National Security Agency (NSA) launched cyberattacks against important industries such as energy, transportation, water conservancy, communications, and national defence research institutions in Heilongjiang province,” Xinhua said, citing the Harbin city public security bureau.
The attacks had “the intention of sabotaging China’s critical information infrastructure, causing social disorder, and stealing important confidential information,” it added.
Anonymous Servers
Xinhua said the NSA operations took place during the Winter Games and were “suspected of activating specific pre-installed backdoors” in Microsoft Windows operating systems on specific devices in Heilongjiang.
In order to cover its tracks, the NSA purchased IP addresses in different countries and “anonymously” rented a large number of network servers including in Europe and Asia,” Xinhua said.
The NSA intended to use cyberattacks to steal the personal data of participating athletes, the news agency said, adding that the cyberattacks reached a peak from the first ice hockey game on February 3.
The attacks targeted information systems such as the Asian Winter Games registration system and stored “sensitive information about the identities of relevant personnel of the event,” Xinhua said.
The US routinely accuses Chinese state-backed hackers of launching attacks against its critical infrastructure and government bodies.
Last month, Washington announced indictments against a slew of alleged Chinese hackers who targeted the US Defense Intelligence Agency, the US Department of Commerce, and the foreign ministries of Taiwan, South Korea, India, and Indonesia.
Beijing denies all involvement in overseas cyber espionage.
After years of being accused by Western governments of cyberattacks and industrial espionage, in the past two years several Chinese organisations and government organs have accused the United States and its allies of similar behaviour.
In December, China said it found and dealt with two US cyberattacks on Chinese tech firms to “steal trade secrets” since May 2023, but did not name the agency involved.
Title Set Two: China Points Finger at US NSA for “Advanced” Cyberattacks During Asian Winter Games
Chinese police in Harbin, a city in northeastern China, have accused the United States National Security Agency (NSA) of orchestrating “advanced” cyberattacks during the Asian Winter Games held in February, with essential industries as the primary targets.
According to a Tuesday report from the state news agency Xinhua, police have added three individuals alleged to be NSA agents to a wanted list. Following their investigations, they have also implicated the University of California and Virginia Tech in these attacks.
Xinhua identified the alleged NSA agents as Katheryn A Wilson, Robert J Snelling, and Stephen W Johnson. These individuals are also accused of “repeatedly carrying out cyberattacks on China’s critical information infrastructure and participating in cyberattacks on Huawei and other enterprises.”
The report did not provide specific details regarding the alleged involvement of the two American universities.
The US Embassy in China has not yet responded to a request for comment submitted via email.
These detailed accusations emerge as the trade tensions between the world’s two largest economies escalate, leading to travel advisories for Chinese tourists visiting the US and a halt in the import of US films into China.
Citing the Harbin city public security bureau, Xinhua stated, “The US National Security Agency (NSA) launched cyberattacks against important industries such as energy, transportation, water conservancy, communications, and national defence research institutions in Heilongjiang province.”
The agency further alleged that the attacks were carried out with “the intention of sabotaging China’s critical information infrastructure, causing social disorder, and stealing important confidential information.”
Anonymous Server Usage
Xinhua reported that the alleged NSA operations coincided with the Winter Games and are “suspected of activating specific pre-installed backdoors” within Microsoft Windows operating systems on specific devices located in Heilongjiang.
To conceal their activities, the NSA reportedly acquired IP addresses in various countries and “anonymously” leased a significant number of network servers across Europe and Asia, according to Xinhua.
The news agency stated that the NSA’s objective in these cyberattacks was to pilfer the personal data of participating athletes, noting that the attacks intensified from the first ice hockey game on February 3.
Xinhua detailed that the attacks targeted information systems, including the Asian Winter Games registration system, and accessed “sensitive information about the identities of relevant personnel of the event.”
The US frequently accuses Chinese state-sponsored hackers of conducting attacks against its critical infrastructure and government entities.
Last month, Washington announced indictments against numerous alleged Chinese hackers for targeting the US Defense Intelligence Agency, the US Department of Commerce, and the foreign ministries of Taiwan, South Korea, India, and Indonesia.
Beijing consistently denies any involvement in cyber espionage abroad.
After years of facing accusations of cyberattacks and industrial espionage from Western governments, several Chinese organisations and government bodies have, in the past two years, accused the United States and its allies of similar actions.
In December, China claimed to have detected and addressed two US cyberattacks targeting Chinese tech firms since May 2023 with the aim of “stealing trade secrets,” although the specific agency involved was not named.
