Home China China Blames U.S. For ‘Advanced’ Cyber Attacks, Identifies Alleged NSA Operatives

China Blames U.S. For ‘Advanced’ Cyber Attacks, Identifies Alleged NSA Operatives

Police added three alleged NSA agents to a wanted list and also accused the University of California and Virginia Tech of being involved in the attacks after carrying out investigations, according to a report by state news agency Xinhua.
cyber attacks

Chinese police in the city of Harbin have accused the U.S. National Security Agency (NSA) of carrying out ‘advanced’ cyber attacks during February’s Asian Winter Games, targeting key sectors.

Police added three alleged NSA agents to a wanted list and also accused the University of California and Virginia Tech of being involved in the attacks after carrying out investigations, according to a report by state news agency Xinhua on Tuesday.

The NSA agents were identified by Xinhua as Katheryn A. Wilson, Robert J. Snelling and Stephen W. Johnson. The three were also found to have “repeatedly carried out cyber attacks on China’s critical information infrastructure and participated in cyber attacks on Huawei [RIC:RIC:HWT.UL] and other enterprises.”

It did not specify how the two American universities were involved.

The U.S. Embassy in China did not immediately respond to an emailed request for comment.

The detailed allegations come as the world’s two largest economies spiral deeper into a trade war that has already spurred travel warnings for Chinese tourists going to the U.S. and halted imports of U.S. films into China.

“The U.S. National Security Agency (NSA) launched cyber attacks against important industries such as energy, transportation, water conservancy, communications, and national defence research institutions in Heilongjiang province,” Xinhua said, citing the Harbin city public security bureau.

The attacks had “the intention of sabotaging China’s critical information infrastructure, causing social disorder, and stealing important confidential information,” it added.

Anonymous Servers

Xinhua said the NSA operations took place during the Winter Games and were “suspected of activating specific pre-installed backdoors” in Microsoft Windows operating systems on specific devices in Heilongjiang.


Nitin A Gokhale WhatsApp Channel

In order to cover its tracks, the NSA purchased IP addresses in different countries and “anonymously” rented a large number of network servers including in Europe and Asia,” Xinhua said.

The NSA intended to use cyberattacks to steal the personal data of participating athletes, the news agency said, adding that the cyber attacks reached a peak from the first ice hockey game on February 3.

The attacks targeted information systems such as the Asian Winter Games registration system and stored “sensitive information about the identities of relevant personnel of the event,” Xinhua said.

The U.S. routinely accuses Chinese state-backed hackers of launching attacks against its critical infrastructure and government bodies.

Last month, Washington announced indictments against a slew of alleged Chinese hackers who targeted the U.S. Defence Intelligence Agency, the U.S. Department of Commerce, and the foreign ministries of Taiwan, South Korea, India, and Indonesia.

Beijing denies all involvement in overseas cyber espionage.

After years of being accused by Western governments of cyberattacks and industrial espionage, in the past two years several Chinese organisations and government organs have accused the United States and its allies of similar behaviour.

In December, China said it found and dealt with two U.S. cyber attacks on Chinese tech firms to “steal trade secrets” since May 2023, but did not name the agency involved.

(With inputs from Reuters)