PLA

China Cyberwarfare Evidence Now Undeniable – Mandiant

Not since the website Dark Visitor was launched by Scott Henderson has there been such an exhaustive study of China’s cyberwarfare capabilities.

The release of the report on Tuesday by Mandiant, a cyber security company, provides a detailed indictment charging the Chinese Communist Party with complicity in the creation of a cyberwarfare unit within the People’s Liberation Army (PLA) responsible for the theft of “hundreds of terabytes of data from at least 141 organizations” since 2006.

The 72-page PDF report, APT1 – Exposing One of China’s Cyber Espionage Units, traces the attacks to an office building housing PLA Unit 61398 on Datong Road in Gaoqiaozhen in the Pudong New Area of Shanghai.

The report gives some credit to two Project 2049 Institute PDF reports, The Chinese People’s Liberation Army Signals Intelligence and Cyber Reconnaissance Infrastructure and China’s Electronic Intelligence Satellite Developments.

Though the 2049 reports are impressive, Mandiant destroys Beijing’s denials of being innocent of massive cyber intrusions around the world.

Clearly, Mandiant caught Beijing’s hands in the cookie jar.

Among large-scale thefts of intellectual property data, include 6.5 terabytes of compressed data from a single organization over a ten-month time period. In the first month of 2011, it successfully compromised at least 17 new victims operating in ten different countries.

In the last two years, the report said the Unit established a minimum of 937 Command and Control servers hosted on 849 distinct IP addresses in 13 countries.

In over 97 percent of the 1,905 times Mandiant observed the intruders connecting to their attack infrastructure, the Unit used IP addresses registered in Shanghai systems to use the Simplified Chinese language. 817 of the 832 (98%) IP addresses into APT1 controlled systems using Remote Desktop resolved back to China. At present, the report estimates that APT1’s current attack infrastructure includes over 1,000 servers.

Mandiant provides a video detailing how APT1 invades a system.

The report identifies three APT1 personas, including UglyGorilla, DOTA, and SuperHard. DOTA used a Shanghai phone number and SuperHard discloses its location to be the Pudong New Area of Shanghai.

“We believe the totality of the evidence we provide in this document bolsters the claim that APT1 is Unit 61398.” However, the report admits another far-fetched possibility: “A secret, resourced organization full of mainland Chinese speakers with direct access to Shanghai-based telecommunications infrastructure is engaged in a multi-year, enterprise scale computer espionage campaign right out of Unit 61398’s gates, preforming tasks similar to Unit 61398’s known mission.”

The report provides photos and details of Unit 61398 facilities, Chinese references discussing the unit’s training and coursework requirements, and internal Chinese communications documenting the nature of the unit’s relationship with at least one state-owned enterprise.

Chinese Navy: Operational Challenge or Potential Partner?

I urge you all to WATCH THE VIDEO of the USNI/AFCEA West 2013 conference panel: “Chinese Navy: Operational Challenge or Potential Partner?” Particularly, Toshi Yoshihara at 38:20.

Panelists include:

Moderator Dr. David M. Finkelstein
Vice President and Director, China Studies, Center for Naval Analyses

Dr. Jacqueline Deal
President and CEO, Long-Term Strategy Group

CAPT James Fanell, USN
Deputy Chief of Staff for Intelligence and Information Operations (N-2), U.S. Pacific Fleet

Major Christopher I. Johnson, USMC
Logistics Officer, Marine Barracks Washington, DC; and Foreign Area Officer, People’s Republic of China

Dr. Toshi Yoshihara
Professor and John A. van Beuren Chair of Asia-Pacific Studies Strategy and Policy, Naval War College; Author of Red Star over the Pacific

YouTube Preview Image

China’s Military Living in “Parallel Universe” – Ford

As more evidence of the monstrous disconnect between China and the rest of the planet, a new commentary by Christopher Ford, senior fellow at the Hudson Institute, indicates China’s military lives in a “parallel universe of competing facts and historical claims.”

The report, Sinocentrism for the Information Age: Comments on the 4th Xiangshan Forum, is based on Ford’s experience at the event held in Beijing from November 15-18, 2012. The meeting was sponsored by the International Military Branch of the China Association for Military Science of the Academy of Military Science of the People’s Liberation Army (PLA).

This commentary is a must read.

See also Information-based
Arms Control and Sino-American Trust
.

Excepts from his commentary:

“In particular, the Chinese and non-Chinese participants seemed to start from radically different starting points on surprisingly basic matters of fact (e.g., about what did or did not happen in the South China Sea in 2012, who started the Korean War, or whether or not Japanese history textbooks acknowledge that country’s invasion of China in the 1930s). In principle, these questions were objectively ‘knowable,’ yet our hosts were not interested in empirical evaluation.”

“Significantly, no non-Chinese participant in our Roundtable presumed to tell the Chinese participants what China’s strategic intentions are. Instead, non-Chinese participants explicitly referred to foreign concerns rooted in perceptions of Beijing’s intentions, and asked about how it might be possible to lessen foreign misperceptions that might exist in this regard if indeed the PRC’s rise is as benign as its leaders claim. The PLA participants, however, were quite comfortable telling non-Chinese what their various governments’ intentions are. We were told, for instance, that Japan wishes to return to imperialist adventurism of the sort that it displayed during the Second World War. The United States, we were further told, wishes to “contain” China and obstruct its rise. These Chinese assumptions were not depicted as mere perceptions, but instead as matters of inarguable fact that we non-Chinese must accept – and thereafter atone for – in order to make future trust possible.”

“For those PLA participants, therefore, achieving strategic trust required that the non-Chinese world undertake something somewhat akin to a Maoist self-criticism session. The various presumptive malefactors who were declared to wish to harm China needed, in effect, to confess their sins and denounce themselves with sufficient intensity, consistency, and sincerity that Chinese would be willing to conclude that we had forever put aside all such deviations from proper behavior. For this group, apparently, having trust required eliciting the other side’s acceptance of one’s own characterizations of history and endorsement of key elements of one’s own world view.”

“These differences were striking. Rather than being about adjudication between or management of competing claims in a pluralist world, the PLA participants seemed to view preventing international conflict and ensuring future ‘trust’ as aiming principally at keeping competing claims from being conceived or asserted in the first place – specifically, by obtaining others’ validation of and agreement with China’s own claims, and its narrative of itself in the world.”

“My dealings with PLA officials at the Xiangshan Forum, however, suggest a possible (and more interesting) alternative explanation. Beijing’s various idiosyncrasies in these regards may be, in meaningful part, the relatively coherent and consistent outgrowths of a conceptual framework – an Information Age twist, if you will, on much older themes of Sinocentric moralism – in which the emerging Chinese superpower hungers to control other peoples’ narrative of China.”

“To be sure, perhaps I am reading too much into a few days’ discussions. On the other hand, perhaps these encounters at the 4th Xiangshan Forum really do offer insight into an idiosyncratic Chinese approach to global order, highlighting a sort of politico-moral imperialism that has few obvious precedents outside the historical Sinosphere. Chinese leaders appear to be strongly invested in other countries’ narratives of China – seeing this as critical terrain for international competition (i.e., advantage or vulnerability) – and they seem to claim the right to control everyone else’s interpretations. If this is so, there may be important policy implications for the United States, and for China’s increasingly nervous neighbors, both about what to expect from Beijing in the years ahead, and about additional ways in which we might perhaps be able to develop effective competitive strategies vis-à-vis the PRC.”

Back to top