Cyber-Warfare: Confirmation Of China's Unit 61398 Attacks American Businesses

A secretive Chinese military unit is believed to be behind a series of hacking attacks, according to U.S. computer security company Mandiant.  Of course the Chinese government strongly denied the accusation, and then attempted to turn around the accusation by stating that China was in fact the victim of U.S. hacking.

Now those of you who have read my novel 'The Den of the Assassin' have learned a few things about cyber-warfare, and how the real world military threat is not going to be between foot soldiers, but will be fought in cyber war, where countries can realistically attempt to use one nation's own military weapons against themselves by taking control of the weapons when they are deployed.  An unconfirmed example of this is when the Iran military is believed to have landed a U.S. Drone on Iran's soil.

But there is so much more at stake, and part of China's end-game is to remove the United States dollar as the world currency. 

How could they accomplish this?

By shaken the financial infrastructure of America's banking and commerce centers vial cyber warfare, that's how.

Imagine if the United States Federal Reserve gets hacked into, or several of our largest banks for that matter?

What if our national grid gets shut down?

If you think this is not possible, then you better think again.

The truth of the matter is that nations such as China, North Korea, Russia, Iran, and others have sizeable military personnel units (tens of thousands in the case of China's 'Blue Army') dedicated to cyber-warfare.

Now, the United States is far from sitting ideal; however, the reality is that if the Chinese government had their military cyberware units attack American companies on American soil, then sadly, we are very much at war.

                                          Is China Declaring War On The United States?
                                     

                                                      Special Mandiant Video Report


The following was issued by Rueters:

The company, Mandiant, identified the People's Liberation Army's Shanghai-based Unit 61398 as the most likely driving force behind the hacking. Mandiant said it believed the unit had carried out "sustained" attacks on a wide range of industries.

 
"The nature of 'Unit 61398's' work is considered by China to be a state secret; however, we believe it engages in harmful 'Computer Network Operations'," Mandiant said in a report released in the United States on Monday.
 
"It is time to acknowledge the threat is originating in China, and we wanted to do our part to arm and prepare security professionals to combat that threat effectively," it said.
 
China's Defense Ministry issued a flat denial of the accusations and called them "unprofessional". It said hacking attacks are a global problem and that China is one of world's biggest victims of cyber assaults.
 
"The Chinese army has never supported any hacking activity," the Defense Ministry said in a brief faxed statement to Reuters. "Statements about the Chinese army engaging in cyber attacks are unprofessional and not in line with facts."
 
Unit 61398 is located in Shanghai's Pudong district, China's financial and banking hub, and is staffed by perhaps thousands of people proficient in English as well as computer programming and network operations, Mandiant said in its report.
 
The unit had stolen "hundreds of terabytes of data from at least 141 organizations across a diverse set of industries beginning as early as 2006", it said.
 
Most of the victims were located in the United States, with smaller numbers in Canada and Britain. The information stolen ranged from details on mergers and acquisitions to the emails of senior employees, the company said.
 
The 12-storey building, which houses the unit, sits in an unassuming residential area and is surrounded by a wall adorned with military propaganda photos and slogans; outside the gate a sign warns members of the public they are in a restricted military area and should not take pictures.
There were no obvious signs of extra security on Tuesday.

The Chinese Foreign Ministry said the government firmly opposed hacking, adding that it doubted the evidence provided in the U.S. security group's report.

"Hacking attacks are transnational and anonymous. Determining their origins are extremely difficult. We don't know how the evidence in this so-called report can be tenable," spokesman Hong Lei told a daily news briefing.

"Arbitrary criticism based on rudimentary data is irresponsible, unprofessional and not helpful in resolving the issue."

Hong cited a Chinese study which pointed to the United States as being behind hacking in China.
"Of the above mentioned Internet hacking attacks, attacks originating from the United States rank first."

"ECONOMIC CYBER ESPIONAGE"

Some experts said they doubted Chinese government denials.

"The PLA plays a key role in China's multi-faceted security strategy, so it makes sense that its resources would be used to facilitate economic cyber espionage that helps the Chinese economy," said Dmitri Alperovitch, chief technology officer and co-founder of CrowdStrike, one of Mandiant's competitors.

Though privately held and little known to the general public, Mandiant is one of a handful of U.S. cyber-security companies that specialize in attempting to detect, prevent and trace the most advanced hacking attacks, instead of the garden-variety viruses and criminal intrusions that befoul corporate networks on a daily basis.

But Mandiant does not promote its analysis in public and only rarely issues topical papers about changes in techniques or behaviors.

It has never before given the apparent proper names of suspected hackers or directly tied them to a military branch of the Chinese government, giving the new report special resonance.

The company published details of the attack programs and dummy websites used to infiltrate U.S. companies, typically via deceptive emails.

U.S. officials have complained in the past to China about sanctioned trade-secret theft, but have had a limited public record to point to.

Mandiant said it knew the PLA would shift tactics and programs in response to its report but concluded that the disclosure was worth it because of the scale of the harm and the ability of China to issue denials in the past and duck accountability.

The company traced Unit 61398's presence on the Internet - including registration data for a question-and-answer session with a Chinese professor and numeric Internet addresses within a block assigned to the PLA unit - and concluded that it was a major contributor to operations against the U.S. companies.

Members of Congress and intelligence authorities in the United States have publicized the same general conclusions: that economic espionage is an official mission of the PLA and other elements of the Chinese government, and that hacking is a primary method.

In November 2011, the U.S. National Counterintelligence Executive publicly decried China in particular as the biggest known thief of U.S. trade secrets.

The Mandiant report comes a week after U.S. President Barack Obama issued a long-awaited executive order aimed at getting the private owners of power plants and other critical infrastructure to share data on attacks with officials and to begin to follow consensus best practices on security.
Both U.S. Democrats and Republicans have said more powerful legislation is needed, citing Chinese penetration not just of the largest companies but of operations essential to a functioning country, including those comprising the electric grid.

                                      China Accuses The United States of Cyber Warfare

The reality of cyber warfare is upon us.  There is real cause for concern.  Fortunately, the United States has not ignored these threats.

International Espionage Thriller 'The Den of the Assassin' by Best-selling Author Peter Thomas Senese To Be Released On E-book On July 14th

Author Peter Thomas Senese is pleased to announce his international espionage thriller titled The Den Of The Assassin will be released in e-book worldwide on July 14th, 2011 and will be available on all e-book platforms.

Critics have praised The Den Of The Assassin as an international financial espionage thriller steeped in the modern-day realities of our world, providing the story a visceral prescience teeming with realism and frightful possibilities of global terrorism, and Senese as a masterful writer of international intrigue.

Peter Thomas Senese commented, “For reader who enjoy fast-paced, multi-dimensional plots based upon historical events and plausible possibilities relevant to the world we live in today, The Den Of The Assassin takes audiences on a thrilling global geopolitical journey that evolves around New York City’s Wall Street.”

The Den Of The Assassin opens in New York City, where an unassuming investment banker, Tyler Boxter, is preoccupied with his all-consuming career that acts as a personal shield against the trappings of life that hide guilt and pain and memories he doesn't want.

A mysterious theft leads Boxter from the sanctity of his Wall Street office and thrusts him into the dark world of international terrorism -- where zealots stir in the brutal desserts of the Middle East, where dark, sunken eyes look into the abyss of Siberia's desolate terrains, where prisoners -citizens- who live on a remote peninsula in Asia would rather submit to isolationist cleansing than feel the wrath of a deceitful troll intent on destroying the ideals of the West. 



Unknown to Boxter, he is about to play a sophisticated but explosive game against a madman who is more savage and merciless than the winds of an atomic holocaust. From the current resurgence of former-KGB hard-liners in Russia and the corrupt oligarchs who control the black-market of the weapons trade, from the isolationist mountains of North Korea to the sweeping deserts of the Middle East, from the looming specter of biological warfare to the ways in which terrorists hide and wash their money, from the arcane methods by which corporate America funds itself to the inner workings of Wall Street's war rooms, to the secrets hidden behind the walls in Beijing, to the unthinkable intent of the once mighty Persian Empire, 'Den Of The Assassin' is an informative, compelling, spin-tingling international espionage thriller that will keep readers turning through the pages.

The Den Of The Assassin will be released in e-book on July 14th, 2011 and is presently available in hardcover form from traditional retailers and online merchants. The Den Of The Assassin was initially released in hardcover prior to the author’s unexpected race into the cyclones of international child abduction. Chasing The Cyclone, inspired by Peter Thomas Senese’s experiences in this area, will be released in hardcover later this summer.


Peter Thomas Senese in the author of numerous historical fiction novels. For more information on The Den Of The Assassin or Peter Thomas Senese, please visit http://www.petersenese.com/.

New York's 'Digital Impersonation Prevention Act' Legislation Offers Victims Hope Against Online Malice

New York State Legislators are seeking to pass a monumental bill (Assembly - 6238/Senate - 4015) that will make online impersonation of another individual with the intent to harm, threaten, or defraud the targeted person a criminal offense punishable by imprisonment. New York State Assembly Member and staunch public advocate Micah Z. Kellner (D-Upper East Side, Yorkville and Roosevelt Island) created and sponsored the groundbreaking 'Digital Impersonation Prevention Act' that will unquestionably benefit all New Yorkers while also demonstrating to the nation and world the critical importance of laws that protect individuals from online malice. Republican Senator Martin Golden (R-Kings County), a lawmaker known for his unyielding support of children and public safety issues has sponsored the bi-partisan legislation in the Senate. The bill has been hailed by victims, activists, and the public-at-large concerned with the limited amount of law concerning online behavior as extremely positive legislation. If passed, an enforceable law will exist that protects against the rapidly growing number of online cases of malicious impersonation and identity theft intended to cause targets grave injury and loss.

Assemblyman Kellner's ‘Digital Impersonation Prevention Act’ (DIPA) strengthens the New York State's protections against predators who use innocent victims' identities to harass, defraud, or send spam to others. It also makes it possible for victims of identity theft to seek civil penalties from the perpetrators. The legislation’s intent is clear: while protecting and respecting the anonymity that the Internet offers to individuals is extremely important, so to is protecting individuals from online sociopathic predators who have intent to destroy another person’s life through malevolent online impersonation and identity theft.

According to the United States Federal Communications Commission estimates, as many as 9 million Americans have their identities stolen each year: a number that appears to be expanding with the increase of Internet users and society's reliance on the Internet as a necessity in our daily lives. Presently, California is the only state with unilateral online impersonation laws establishing it a criminal act to impersonate an individual online with intent to cause the target harm. Texas also has a specific law that makes it a felony to impersonate someone on a social network.


Commenting on the need and intent of the new legislation, Senator Martin Golden said, "It's trying to get a handle on a different kind of cyber-bullying. You've got to set some parameters so people understand that you have to live within the norm of society."


The next step for the DIPA legislation is for it be voted on by Senate Majority Leader and child advocate defender Senator Dean G. Skelos' 'Rules Committee'. Senator Skelos' extensive history of creating and sponsoring laws that will protect others is well known, including the senator's writing of the landmark 'Megan's Law'. In addition, Senator Skelos' leadership with respect to online predator behavior includes the championing of the e-STOP law which prevents registered sex offenders from accessing social networking websites, including MySpace and Facebook, and prohibiting online communication between sex offenders and children.

Assemblyman Joseph Lentol, the Chairman of the ‘Committee of Codes’, and a lawmaker who has been remarkably serving New Yorkers in Albany for nearly 40 years will oversee the DIPA legislation's movement before the Codes Committee. Assemblyman Lentol, a former Assistant District Attorney for Kings County, has a long and deep history of supporting legislation that helps the children of the state.

Author and child advocate Peter Thomas Senese added, "Imagine having an online predator create an assortment of websites, social media accounts, posts, and twitter or email messages all under your name and identity, and then post content on these sites that were untruthful, malicious, distorted, and fabricated in order to cause you injury. Think your very worst thoughts. Now imagine the number of sites your identity is being used on is magnified substantially. If you think you have swift and effective recourse, you are mistaken as civil litigation has proven for many to be unreliable, lengthy, and sadly, unproductive. The reality is you have a very serious and dangerous problem on your hands, and the sociopathic predator who has acted to harm you does not fear legal retribution under existing available laws. The DIPA legislation changes all this."

If the DIPA law is passed, New Yorkers will be offered additional protection from cyber terrorists since present New York State law allows for criminal prosecution of an out-of-state predator if their acts have consequences for their victims living in New York State.

In addition, legal experts believe several existing state criminal laws could potentially be applied when prosecuting against the offense of online impersonation.

Dr. Keely Kolmes, Psy.D., the pioneer of 'Digital and Social Media Ethics for Psychotherapists', cautions about the potential harms of online impersonation. “This is a form of harassment and the emotional distress may lead to anxiety, depression, sleep disturbances or other disruptions to a person's well-being. It could significantly impair a person's daily functioning in school, work, or relationships. It can also have an effect on someone's social support system if others don't recognize that the individual is being impersonated.”


Erica Johnstone, a partner at Ridder, Costa & Johnstone LLP who has extensive experience litigating online harassment, identity theft and impersonation supported California's SB 1411 bill concerning online impersonation that became law on January 1st, 2011 previously observed that, “Almost all cyber-harassment goes unpunished, with devastating consequences to the victims, including loss of reputation, shame, mortification, hurt feelings, pain, suffering, inconvenience, loss of business and education opportunities, and emotional distress.”

According to experts focusing on online impersonation, the psychological factors behind the person committing such online impersonation with malicious intent can be identified as greed, revenge, frustration, and grievance. The majority of individuals who maliciously impersonate another consistently demonstrate behavior of an online stalker whereas the online stalker/impersonator is motivated by a desire to exert control over their victims and engage in behavior to accomplish this end. These crimes are real and are affecting everyone - individuals, business organizations, nation-states and the international communities. The perpetual and compulsive act of maliciously impersonating another individual online demonstrates behavior best defined as “Cyber Terrorism.”

Demonstrating the sweeping problem of malicious online impersonation facing citizens everywhere, California State Senator Joe Simitian, who wrote and sponsored the California impersonation law provides insight on this national issue that each state must immediately address for themselves when he said, "Pretending to be someone else online takes no more Web savvy than posting comments on a Web forum under that person's name," said Simitian, in a statement. "When it's done to cause harm, folks need a law on the books they can turn to."

Peter Thomas Senese included, "One of the great problems that exists in the civil prosecution against a person who maliciously impersonates a target online is that typically the predator has limited assets, and therefore is judgment proof - that is, a defendant has no concern over financial compensation of their victim since they have no assets to provide. At the moment, and why New York needs to pass the DIPA law is due to the stark reality that many of these online predators simply ignore the rules of court and laws since they believe there is limited recourse available for their target. So, if a predator has no concern of a monetary judgment against them, then more than likely, they will continue to create an online terrorist state for their victim. However, if the ‘Digital Impersonation Prevention Act’ is made into law, then the citizens of New York, similar to the citizens of California and to a lesser degree, Texas, will have available to them a very unique tool that predators cannot circumvent: a criminal code that does not require for a victim to have extensive assets to litigate over in order to obtain relief, but also a deterrent and tool that could shorten the lengthy legal process required under civil law. The message will be clear to online terrorists who impersonate another individual: your malicious behavior will no longer be tolerated due to new criminal laws now in place."

The ramifications of online malicious impersonation are in fact a worldwide problem and its malevolent intent far-reaching. According to Martin Waage, President of world-renown security experts ABP World Group Ltd., a leading international child abduction recovery services company, "Online impersonation as part of a malicious defamation and slander campaign directed toward an unsuspecting parental guardian targeted in the growing plague of criminal international parental child abduction that is created as part of a child abductor's defense and then used to sanction their criminal act of child stealing is a malicious and tragic occurrence implemented by thousands of parental child abductors each year. We have seen this type of malicious, illicit behavior targeted against parents from New York to Rome. They had to react to the nightmare of having their child abducted while having their name disparaged online by a sociopathic abducting parent in order to defend their criminal acts. And always - the abductor uses the untrue and fabricated online impersonation and slander against their target. In my opinion this is the most vicious and evil form of online impersonation and identity theft - and it's happening all the time everywhere. I urge New York lawmakers to pass this important law."

The legislation, (A.6238/S.4015), will create effective penalties, including fines and imprisonment, for those who engage in digital impersonation for the purposes of harming, threatening, or defrauding another person, as well as sending unsolicited bulk emails and commercial solicitations, or utilizing a contact list. It also establishes a civil cause of action for people who are victims of digital impersonation, allowing victims to sue perpetrators for up to $500 for each incident.

Advocates supporting the ‘Digital Impersonation Prevention Act’ have recently created a petition sight and request anyone anywhere concerned with the criminal act of malicious online impersonation to sign the petition.