Showing posts with label Tailored. Show all posts
Showing posts with label Tailored. Show all posts

Tuesday, June 11, 2013

The NSA's TAO has been hacking China for 15 years.

     The primary complaint against China's outift of military hackers has been dual pronged: the U.S. private sector is losing expensive proprietary information, and the public sector is having its sensitive weapons systems compromised.

     China's response has been, simply: yeah but the U.S. did it to us first, and worse.

     It turns out, China might just be telling it like it is this time.

     The deafening sound of internet aggregators shredding Edward Snowden's life into digestible pieces drowned out probably one of the most epic posts of the week: Matthew M. Aid's Foreign Policy piece titled "Inside the NSA's Ultra-Secret China Hacking Group."

     In it, Aid describes how the U.S. has a long history of penetrating China's systems — what they call "Computer Network Exploitation." The U.S. government, as we should have assumed, knows the most intimate details about the Chinese communist party and its People's Liberation Army.
From Aid's piece:

A highly secretive unit of the National Security Agency (NSA) ... called the Office of Tailored Access Operations, or TAO, has successfully penetrated Chinese computer and telecommunications systems for almost 15 years, generating some of the best and most reliable intelligence information about what is going on inside the People's Republic of China.

     TAO mirrors China's methods by first hacking into computer networks, then protecting themselves from being identified, and finally copying ALL communications and files from within that network.
If that sounds familiar, its because the process nearly matches the description Mandiant — the company that caught Chinese hackers red-handed — gave to explain the method the PLA uses to steal American information.

     Except America's system pre-dates that of China.

Chinese Defense Ministry spokesman, Geng Yansheng, recently said in a briefing:
“The team was set up to better safeguard the internet security of the armed forces. Cyber security was an international problem, affecting civil and military areas. China is still “relatively weak” in internet security protection, and vulnerable to cyber-terrorism.”

     It's not just China in the mix either — it's Israel, Singapore, Japan, Switzerland, the U.K. and others, British intelligence analyst Glenmore Trenear-Harvey told InfoSec.com.

     "This is not just conventional military powers. Put bluntly, everyone’s at it. It is a game anyone can play. But do remember that we – the U.S. and UK – are doing this in reverse and we are very successful," said Trenear-Harvey.

     Not only has Obama ordered the military to draw up a list of potential cyber targets around the globe, but most of the military academies now offer majors in Cyber Warfare.

     There's also been revelations that the cyber war is getting a big boost from the civilian side. Apparently, more than a third of the Marine Corps' cyber war will be fought by contractors.

     Hackers may be full of old tricks, but it's a new battlefield, and it looks like everyone is down to play the game.

"[Cyber Warfare] an incredibly potent weapon which will certainly be utilized,” said Trenear-Harvey.

Wednesday, May 29, 2013

China Hacks Patriot Missile Blue Prints

     WASHINGTON- A hacker from China is said to have gained access to the design of more than two dozen major weapons systems in the United States. Quoting a report prepared for the Department of Defense by the Defense Science Board, the Washington Post said the successful hack included theft of blue prints for types of aircraft and ships, as well as the importance of missile defense for Europe, Asia, and the Gulf.



      Among the weapons listed in the report are a sophisticated system of Patriot missiles, ballistic missile defense system of the Navy, the F/A-18 fighter jet, the V-22 Osprey, Black Hawk helicopters, and F-35 Joint Strike Fighter.

      The report did not say when the cyber theft was done or who was involved. But the tactics used, such as the ability to paralyze and destroy data communications, refer to the origin of Chinese hackers.

      In a report to Congress this month, the Pentagon said that China uses cyber espionage to modernize its military and hacking because of serious concern. The U.S. government is said to be the target of hacking and is "directly attributable to the Chinese government and military."

      China has denied the report and has declared it unfounded.

      Previously, a computer security firm Mandiant says a Chinese secret military unit, 31698,  may be behind a series of hacking attacks in the U.S.. A total of 100 U.S. companies are rumored to have been the victims of these attacks.

This document http://www.kaskus.co.id/thread/51a67bc7db9248bf5d000003/hacker-china-berhasil-retas-blue-print-rudal-patriot/1 translated with google translator and edited for clarity.


Monday, May 27, 2013

How the U.S. government supposedly spies on the world disguised as Chinese hackers

     In March of this year, the U.S. Treasury official Jacob Lu's visit on network security issues put pressure on China.
     Recently, in the United States, "Business Week" published an article entitled "How The U.S. government spies on the world". The article said that the U.S. government is against Chinese hacking, and continues to put pressure on the Chinese. In fact, the United States itself is in on the network security issues.  He then formed a greater threat to the country. The U.S. gave the Chinese hackers the opportunity to hit back at the U.S. government. China announced that the United States can do some more unseemly things.
The following is the full text:
     "Hidden in the dense woods 15 miles north of the road is the U.S. National Security Agency (NSA) in congested Washington. The building covers an area of ​​6,000,000 square feet, full of satellite receivers.
     The U.S. National Security Agency was established in 1952, and is responsible for intercepting radio and other electronic transmissions. Today, a lot of resources are given to spies to steal information on "static electronic data."  This information comes from terrorist network computers and hard drives, rogue states, and even nominally friendly governments.
     Former U.S. Homeland Security Secretary Mike McConnell said that U.S. President Barack Obama receives daily intelligence briefings, the majority of the information from the government spy network. "This information is at least 75%, or even more." He said.
     U.S. National Security plays an important role in intelligence gathering and makes it difficult for the U.S. government to put pressure on other countries - particularly China - who could not stop them from stealing American company database product details and trade secrets. In recent months, the Obama administration has begun to publicly humiliate China, calling attention to the  Chinese cyber espionage program that has been eyeing a number of US companies, including Google, Yahoo and Intel, stealing their source code and other confidential information.
     This spring, the U.S. Treasury Secretary James Blue (Jacob Lew) and the U.S. Joint Chiefs of Staff Chairman Colonel Martin Dempsey visited China on the hacking events and put pressure on the Chinese officials. On the 26th of May the U.S. National Security Adviser Thomas Donilon is scheduled to visit China.
China's response: who's talking
     "You went in and sat across from hackers who said, 'You are spies, we are spies, but you should not steal from someone that stole something.' If this is the case, then the dialogue will be difficult to carry out."  Former U.S. National Security Secretary and CIA director Michael Hayden says, "between countries spy on each other and I have to see to understand." Hayden is now on the Washington security consulting firm Chertoff Group as a supervisor. He said: "But this is not a race, which country can spy on private companies.  It is not even a fair contest."
     In May, the Pentagon submitted to Congress the first official Chinese government report on direct snooping on U.S. defense contractors. The report shows that U.S. intelligence is being a massive theft of government agencies.  The agencies are very familiar with how to steal technology from U.S. companies. This makes the Sino-US relations even more tense. Chinese leaders have always denied manipulating hackers. Official media, "People's Daily" published an article about the Pentagon report, saying the U.S. is the "real Matrix."
The U.S. government does not deny having an espionage network.
     "You're not waiting for someone to decide to put the information into electronic photons, and then send them out." Hayden said, "The information is transmitted to the storage place from the opponent's network information, and in this regard is doing the best.  Then stop there."
     The U.S.'s position is that some hacking is more tolerable than others, and the U.S. National Security hacking during the Cold War was to follow the set of informal rules, and this is acceptable.
     Port Washington is a good security risk management company for the companies that were attacked by hackers advice. The person in charge, Jacob Olcott, said: "China is now doing exactly what you should not do."
Custom Entrance Organization
     The U.S. National Security Agency has a hacking team called "Custom Entrance Organization" (Tailored Access Operations, referred to as TAO). According to two anonymous former U.S. National Security Bureau officials, the agency collected a lot of information, including information on terrorist financial networks, international money laundering and the drug trade, as well as foreign military information and even domestic political opponents strategies about their own potential controversy.
     Over the years, the U.S. National Security Agency has not recognized the existence of TAO.Another anonymous Pentagon officials confirmed that, TAO engages in cyber espionage, or as the U.S. Department of Defense called it "computer network use," but he stressed that, TAO is not against technology, trade secrets or financial secrets. The official said the number of people working for the TAO is confidential. U.S. Homeland Security spokesman VaneĆ© Vines refused to answer any questions about TAO.
Intelligence fusion center resources
     Two former NSA officials agreed to introduce TAO and its activities, but declined to disclose it for the government and units. Mostly the U.S. spy network of military units have received special training. They sat in front of the stage to run the complex manipulation of hacking software, filtered from the world's computers to steal information, and then transferred to the "fusion center intelligence resources",  Then intelligence analysts process all information.  The NSB U.S. law prohibits the stealing from U.S. domestic residents or companies, including non-US citizens, and citizens not in the United States of America.
     According to one official the agency received a staggering two petabytes per hour from foreign computer systems.  That is almost 2.1 million gigabytes, or rather hundreds of millions of pages of text information.
     The U.S. National Security Agency has automated the process,  Like the real world, like a spy, the U.S. network of spies try to cover their tracks or to camouflage them on their own.  Even in such ways such as masquerading as Chinese hackers to protect themselves from the hacking  being found
Flourishing network-industrial complex
     Although the Pentagon and other agencies are having budget cuts the NSA hackers are still creating a thriving network of industrial complexes.  Defense contractors and small companies are hired to create a specific hacking tools, looking for security vulnerabilities in commonly used software, so that the government can use these tactics. KEYW CEO Leonard Moodispaw said the company has done very powerful business intelligence training for the United States once.  However, he said, will not disclose more information about it.
"We say that the federal government does not like us too give away much detail." He said.
     The Federation of American Scientists political confidential survey project leader Steven Aftergood says that all these hacking activities give China the opportunity to hit back at the U.S. government. China can reverse the U.S. protests against industrial espionage, and declare that the United States does some unseemly things.
The plan to steal a new car may be possible.  But you can not steal state secrets.
New focus
     Intelligence officials have put pressure on China.  One way to attack is to restrict the country from hacking into trade secrets.  Selling stolen technology manufactured products would cause the creation of import restrictions.  The manufacturers of these products staff Visas would not be approved.
     "We do not enter into the philosophical level, the controversy can be accepted on what espionage contains and does not contain." Hayden said.  Instead, the United States should pay attention to China, and it's economic areas that might benefit from such thefts."
     In February, the Obama administration said that it would consider sanctioning countries that  steal company information. Network security expert Christopher Finan said that such punishment is difficult to put into practice. Finanm until last yearm has worked in the Obama administration's National Security Council.
     "It is too hard to determine whether a product in the end is using stolen technology, or the country of manufacturer used the technology to progress itself." Finan said, "the existing intellectual property protection loss is a mess, and can not be defined."
     Finan said he believes the tough sanctions may bring more than just a trade war, but can also harm the same U.S. company and products, which is what they want.  To protect the object.
"China has been looking at measures to limit U.S. companies in China's domestic market." He said, "this will help them."

This article taken from: www.cnhacker.org/435.html‎ translated into English and edited for clarity.