The Chinese government is not happy after Australia joined with the US and other allies to blame China for a massive cyber attack.
Australia and its allies have directly accused China of orchestrating cyberattacks. Picture: iStockSource:Getty Images
Australia has joined with the United States and other allied nations to condemn China’s “malicious cyber activities”, directly blaming it for a massive hack of Microsoft Exchange software earlier this year.
In a joint statement on Monday night, Foreign Minister Marise Payne, Home Affairs Minister Karen Andrews and Defence Minister Peter Dutton said China’s actions in cyberspace had “undermined international stability and security”.
They said the Australian government was “seriously concerned” about reports from allies that China’s Ministry of State Security (MSS) was “engaging contract hackers” to steal intellectual property from other countries.
“Australia calls on all countries, including China, to act responsibly in cyberspace,” said Ms Payne, Ms Andrews and Mr Dutton.
“China must adhere to the commitments it has made in the G20, and bilaterally, to refrain from cyber-enabled theft of intellectual property, trade secrets and confidential business information with the intent of obtaining competitive advantage.”
They said Australia’s cyber security posture was “strong”, but there was “no room for complacency” and the government would continue to work with its international partners to strengthen security.
RELATED: China’s misinformation war against Australia
Australian Foreign Minister Marise Payne. Picture: Hannah McKay/Getty ImagesSource:Getty Images
China reacts to accusations
A Chinese Embassy Spokesperson in Australia has reacted to the move with a blistering statement.
Here it is in full.
“China firmly rejects the groundless accusations made by the Australian government on cyber issues, following the steps and parroting the rhetoric of the US,” it reads.
“It is well known that the US has engaged in unscrupulous, massive and indiscriminate eavesdropping on many countries including its allies. It is the world champion of malicious cyber attacks.
“Australia also has a poor record, including monitoring the mobile phone of the president of its biggest neighbor country, not to mention acting as an accomplice for the US’ eavesdropping activities under the framework of Five Eyes alliance.
“What the Australian government has done is extremely hypocritical, like a thief crying ‘stop the thief’.
“As a victim of cyber attacks, China always firmly opposes cyber attacks and cyber theft in all forms, and calls on countries to advance dialogue and cooperation to safeguard cyber security.
“China put forward the Global Initiative on Data Security last September, and hopes that all countries will respond positively to jointly foster a peaceful, secure, open and cooperative cyberspace, if they genuinely care about cyber security.”
China also responded to the allegations through Beijing-linked state media outlet Global Times.
“.... the Chinese government hiring hackers “to conduct unsanctioned cyber operations globally” is a huge lie,” a Global Times editorial reads.
“Such a practice cannot be carried out in China’s system, and it is completely inexplicable from the perspective of motivation.”
It accused Washington of exploiting cyber attacks to “frame China”.
“The US, the global top technology center, has blatantly set up cyber troops, but loudly accuses other countries of launching cyber attacks. How ridiculous!”
“The US cannot exploit these smears to substantively attack China. If the US takes aggressive measures, carries out national-level cyber attacks on China, or imposes so-called sanctions on China, we will retaliate.”
It warned the US would “bear responsibility” for the “vicious accusations”, along with its allies.
‘Pattern of irresponsible behaviour’
The Microsoft Exchange hack, first identified in January, compromised tens of thousands of computers around the world. Private sector groups quickly pointed the finger at China, though it had not been publicly accused by governments until now.
The Australian ministers’ joint statement was released in co-ordination with the US, United Kingdom, European Union, NATO, Canada, Japan and New Zealand.
US Secretary of State Antony Blinken said China was being held accountable for a “pattern of irresponsible, disruptive and destabilising behaviour in cyberspace”.
“China’s Ministry of State Security has fostered an ecosystem of criminal contract hackers who carry out both state-sponsored activities and cybercrime for their own financial gain,” said Mr Blinken.
“In addition, the US government alongside our allies and partners has formally confirmed that cyber actors affiliated with the MSS exploited vulnerabilities in Microsoft Exchange Server in a massive cyber espionage operation that indiscriminately compromised thousands of computers and networks, mostly belonging to private sector victims.
“As evidenced by the indictment of three MSS officers and one of their contract hackers unsealed by the Department of Justice today, the US will impose consequences on Chinese malicious cyber actors for their irresponsible behaviour in cyberspace.”
Australian PM Scott Morrison and Chinese President Xi Jinping. Relations between the countries have cooled in recent years.Source:Supplied
Mr Blinken said the international community had laid out clear expectations and guidelines for what constitutes “responsible behaviour” in cyberspace.
“Responsible states do not indiscriminately compromise global network security nor knowingly harbour cyber criminals, let alone sponsor and collaborate with them,” he said.
“These contract hackers cost governments and businesses billions of dollars in stolen intellectual property, ransom payments and cybersecurity mitigation efforts, all while the MSS had them on its payroll.”
He added that the US and its allies would work together to oppose “digital authoritarianism”, and “enhance global security and stability” in cyberspace.
RELATED: China builds new Great Wall as conflict escalates
US Secretary of State Antony Blinken. Picture: Kevin Dietsch/Getty Images/AFPSource:AFP
China nationals under scrutiny
The indictment Mr Blinken mentioned concerns four Chinese nationals working with the MSS. A grand jury in San Diego has charged each of them with conspiracy to commit computer fraud and conspiracy to commit economic espionage, which carry a maximum combined prison sentence of 20 years.
They were allegedly part of a “worldwide hacking and economic espionage campaign” to hack into the computer systems of dozens of companies, universities and government entities in the US and elsewhere between 2011 and 2018.
The cyberattacks were focused on stealing information “of significant economic benefit to China’s companies and commercial sectors”, including information that would allow them to circumvent “resource-intensive research and development processes”.
“These charges once again highlight that China continues to use cyber-enabled attacks to steal what other countries make, in flagrant disregard of its bilateral and multilateral commitments,” said Deputy Attorney General Lisa Monaco.
“The breadth and duration of China’s hacking campaigns, including these efforts targeting a dozen countries across sectors ranging from healthcare and biomedical research to aviation and defence, remind us that no country or industry is safe.”
FBI Deputy Director Paul Abbate said the US would not allow the Chinese government to “obtain unfair economic advantage” through “criminal intrusion and theft”.
RELATED: China threatens to nuke Japan if it interferes
Chinese President Xi Jinping. Picture: Xie Huanchi/Xinhua via Getty ImagesSource:Getty Images
British Foreign Minister Dominic Raab described a “pervasive pattern of hacking” from China, saying the Microsoft Exchange cyberattack was “reckless” but “familiar”.
“The Chinese government must end this systematic cyber sabotage and can be expect to be held to account if it does not,” Mr Raab said.
The co-ordinated international effort to apply pressure to China comes in the wake of US President Joe Biden’s summit with Russian President Vladimir Putin last month, where Mr Biden warned Mr Putin he would face “consequences” if cyberattacks continued to be launched from Russia.
Russia has been blamed for a series of ransomware attacks, in which criminals steal companies’ data and then demand payment to return it.
The US imposed sanctions on Russia in response to the hacking in April. It has yet to announce any sanctions against China.
Speaking to reporters at the White House today, Mr Biden suggested that was because the investigation into the Microsoft Exchange hack was still ongoing.