Report outlines spying on U.S. by Iran, Russia, China
WASHINGTON — A Chinese cyberespionage group called APT10 relentlessly attacks U.S. engineering, telecom and aerospace industries. Russian hackers last year compromised dozens of U.S. energy companies. An Iranian hackers group known as “Rocket Kitten” repeatedly target American defense companies in hopes of stealing information to boost Tehran’s missile and space programs.
While Moscow’s efforts to meddle in the 2016 U.S. presidential election are widely known, spy services from China, Russia and Iran, along with their proxy hackers, also are hard at work trying to steal trade secrets and proprietary information from the United States, according to a government report released Thursday. A classified version of the report was sent to Congress.
“Foreign economic and industrial espionage against the United States continues to represent a significant threat to America’s prosperity, security and competitive advantage,” the National Counterintelligence and Security Center said. “China, Russia and Iran stand out as three of the most capable and active cyber actors tied to economic espionage and the potential theft of U.S. trade secrets and proprietary information.”
Cyberespionage is a relatively lowcost, high-yield way to access and acquire information from U.S. research institutions, universities and corporations, the report said. More vulnerabilities will emerge with the increase in cloud computing, artificial intelligence and the proliferation of vehicles, home appliances, medical devices and other items connected to the internet.
Cyberoperations are the preferred method for conducting economic espionage, the report said, but U.S. adversaries also acquire sensitive information by hiring sophisticated hackers, recruiting spies or gleaning material from foreign students studying at American universities.
Adversaries also are infiltrating computer networks of suppliers that serve large companies and then using that connection to worm their way up the chain into large corporate computer systems.