US, Japan authorities warn of China-linked hacking group BlackTech


This is AI generated summarization, which may have errors. For context, always refer to the full article.

US, Japan authorities warn of China-linked hacking group BlackTech

CYBERSECURITY. A man holds a laptop computer as cyber code is projected on him in this illustration picture taken on May 13, 2017

Kacper Pempel/Reuters

The joint security advisory urges firms to review their internet routers to minimize the risk of attack from a group that has demonstrated abilities to modify router firmware without detection

US National Security Agency, Federal Bureau of Investigation and Japanese police jointly warned multinational companies of China-linked hacker group BlackTech in a cybersecurity advisory late on Wednesday, September 27.

The joint advisory, which also came from the US Cybersecurity and Infrastructure Security Agency and its Japanese counterpart, urged firms to review the internet routers at their subsidiaries to minimize the risk of potential attack from the group.

“BlackTech has demonstrated capabilities in modifying router firmware without detection and exploiting routers’ domain-trust relationships to pivot from international subsidiaries to headquarters in Japan and the United States, which are the primary targets,” the statement said.

BlackTech has been engaging in cyberattacks on governments and tech-sector companies in the United States and East Asia since around 2010, Japan’s National Police Agency said in a separate statement.

In 2020, self-ruled Taiwan’s security authority reported cyberattacks to some 6,000 government officials’ email accounts from Blacktech and another hacking group Taidoor, saying both were likely backed by the Chinese Communist Party.

Amid heightening US-China tensions over issues including Taiwan, US security officials are raising the tone of their warnings against China’s cyberattack capabilities. FBI chief Chris Wray earlier this month said China “has a bigger hacking program than every other major nation combined”.

In May, cybersecurity authorities of Australia, Canada, New Zealand and the United Kingdom joined the US agencies in issuing an advisory on China’s “state-sponsored cyber actor”.

Japan, a key US ally in East Asia along with South Korea, was allegedly attacked by Chinese military hackers that gained access to its classified defense networks in 2020, the Washington Post said last month. The Pentagon said it was confident about sharing intelligence with Japan despite the report. –

Add a comment

Sort by

There are no comments yet. Add your comment to start the conversation.

Summarize this article with AI