Share

Related Links

  • Finjan
  • Elsevier Ltd is not responsible for the content of external websites.

Related Stories

  • Finjan introduces hybrid cloud web security
    Finjan has taken the wraps off Vital Cloud and Vital Cloud Hybrid, two cloud security offerings that it claims allow businesses to extend their IT security to the "borderless enterprise".
  • Government behind on information security – Eleanor Laing
    As more and more fundamental tasks in society are carried out online, information security is becoming increasingly important, but the government is not moving fast enough, according to Conservatives MP Eleanor Laing.
  • Arbor Networks shows how Iran filters and blocks internet traffic
    Arbor Networks has published internet bandwidth usage figures from June and July that make fascinating reading if you ever wondered how less democratic governments such as Iran filters and blocks internet traffic for their citizens.
  • Zero-day Adobe exploit zapped by Finjan
    Finjan, the business internet security specialist, claims its gateway security technology can easily counter a zero-day vulnerability of Adobe Acrobat Reader and Flash Player
  • Panda Security roundtable discusses cybersecurity trends
    Panda Security held its second annual security blogger summit in Madrid last week, at which more than 200 security professionals attended. Discussion highlights of the event included internet mafias, the risks they pose to both consumers and businesses, and how law enforcement should be involved to stop cybercriminals from acting with impunity.

Top 5 Stories

News

China preparing to ramp up cyberespionage?

26 October 2009

A report commissioned by a US Congressional advisory panel monitoring the security implications of trading with China has warned that China could be preparing to ramp up cyberespionage and has started spying on the servers of the US government and major companies.

And, says Finjan, the business internet security specialist, now is the time for companies to start increasing their IT security defences to stop them falling victim to what appears to be a rash of impending cyberespionage from the Far East.

Yuval Ben-Itzhak, Finjan's CTO, said that a number of cyberattacks and hacker incursions originated from China have been implicated into Western IT systems in recent years.

"Obviously it's hard to prove beyond a shadow of a doubt that the government there is involved in these attacks, however according to the report it's quite likely that government is active in this domain", he said.

"It's against this backdrop that we've been conducting investigations into Chinese attacks on Western public and private-sector IT systems for some time", he added.

According to Ben-Itzhak, Finjan's malicious code research centre staff conducted an in-depth study into the rising volume of cyberattacks emanating from China and reported that there were some very sophisticated cyberattacks taking place.

In the 2007 security and hacker attack methodology study, researchers found at least one set of attacks coming from a server group that belongs to a Chinese government office.

The secuity study noted that some sites in the network led to trojan sites that exploit the users' web browser software by downloading the trojan and installing it on the user desktop.

Once the users' PC has been infected, Finjan said that the trojan malware then starts to send data to other websites on the internet-connected network.

Additional sites in the network, meanwhile, were found to monitor and control the attack using statistics as to how many users visit the site and how many got infected with malware.

"And that was two years ago, so you can imagine that the Chinese hacker attack groups - regardless of who they are affiliated to - have increased in their level of technology sophistication, so this report serves as a clear warning to companies of the need to review and enhance their IT security defences", Ben-Itzhak said.

"Tools and products to fights against the increasing cybercrime from China are available for businesses and individuals", he added.

"The reason many businesses are becoming victims to these attacks is the lack of knowledge and the false believe that their existing firewalls and anti-virus can do the job for them."

"Although that was the case five to 10 years ago, since cybercriminals introduced new attack techniques firewall and anti-virus are not enough to stop today's cyberattacks."

This article is featured in:
Internet and Network Security • Malware and Hardware Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.