Powered by MOMENTUM MEDIA
cyber daily logo

Breaking news and updates daily. Subscribe to our Newsletter

Breaking news and updates daily. Subscribe to our Newsletter X facebook linkedin Instagram Instagram

Chinese cyber attack targets US ambassador to Beijing

A Chinese cyber attack resulted in the US ambassador to Beijing’s emails being compromised.

user icon Daniel Croft
Fri, 21 Jul 2023
Chinese cyber attack targets US ambassador to Beijing
expand image

The attack, which was first identified last week, was identified as a highly sophisticated attack from China that led to the emails of a number of US officials being compromised.

Now, new reports have shown that Nicholas Burns, the US ambassador to Beijing, is one of the officials affected in the attack.

Other affected officials include Daniel Kritenbrink, assistant secretary of state for east Asia, as well as Gina Raimondo, US Commerce Secretary.

============
============

It is believed that Gina Raimondo was targeted due to Iran-related sanctions her department had been imposing on China.

China responded to the sanctions, saying: “The US action lacks factual basis and due process, harming the legitimate rights and interests of Chinese enterprises and individuals.

“China will take necessary measures to resolutely safeguard the legitimate rights and interests of Chinese enterprises and individuals.”

However, according to quotes from US officials via The Guardian, the three named above are the most senior targets, but the number of emails breached in the attack could be in the hundreds of thousands.

“For security reasons, we will not be sharing additional information on the nature and scope of this cyber security incident at this time.”

“The department continuously monitors and responds to activity of concern on our networks,” the spokesperson said. “Our investigation is ongoing, and we cannot provide further details at this time.”

Hackers reportedly exploited a flaw in Microsoft’s cloud computing service; however, the tech giant said that the issue had since been fixed.

Microsoft has identified the group as Storm-0558, a “China-based threat actor with espionage objectives”.

Microsoft described the group as highly sophisticated and well resourced, saying that it first identified the campaign on 16 June 2023 and found that when it was launched on 15 May 2023, “no other environment was impacted”.

“Microsoft has successfully blocked this campaign from Storm-0558. As with any observed nation-state actor activity, Microsoft has directly notified targeted or compromised customers, providing them with important information needed to secure their environments,” it said.

It has been theorised that hackers could have gained access during US Secretary of State Antony Blinken’s visit to China last month, gaining information on US preparations and internal discussions of the meetings that were held during the visit.

Daniel Croft

Daniel Croft

Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.

cd intro podcast

Introducing Cyber Daily, the new name for Cyber Security Connect

Click here to learn all about it
newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.