The United States, UK and New Zealand have all accused China-backed cyber groups of being behind a series of attacks against politicians and key democratic institutions, allegations that prompted angry Chinese denials.
In rare and detailed public accusations against China, US, UK and New Zealand all described a series of cyber breaches over the last decade or more, in what appeared to be a concerted effort to hold the Chinese government accountable.
The US Justice Department charged seven Chinese nationals over what it said was a 14-year “prolific global hacking operation” designed to aid China’s “economic espionage and foreign intelligence objectives.”
Deputy Attorney General Lisa Monaco said the campaign involved more than 10,000 emails being sent, targeting US and foreign-based businesses, politicians, candidates for elected office and journalists.
The US said a unit, dubbed APT31, was behind the attacks, describing it as a “cyberespionage program” run by China’s powerful Ministry of State Security out of the central city of Wuhan.
The hackers gained access to “email accounts, cloud storage accounts, and telephone call records” the Justice Department said, monitoring some accounts for “years”.
Hours later, the UK said that from 2021-2022 the same APT31 group had targeted UK politicians’ accounts, including many who were critical of China’s policies.
In a parallel announcement, New Zealand said its Parliamentary Counsel Office, which drafts and publishes laws, had been compromised around the same period.
New Zealand, normally one of China’s strongest backers in the West, blamed the Chinese “state-sponsored group” APT40 for the attack.
Recently elected centre-right Prime Minister Christopher Luxon admitted it was a “big step” to blame the cyber attack on China, his country’s biggest trade partner.
New Zealand Foreign Minister Winston Peters said he had instructed diplomats to “speak today to the Chinese Ambassador, to lay out our position and express our concerns”.
“That conversation has now taken place,” he said.
‘Malicious slander’
In recent years, Western nations have been increasingly willing to expose malicious cyber operations, and to point fingers at foreign governments.
However China reacted angrily to the accusations, with embassies in London, Wellington and Washington issuing denunciations.
“The UK’s hype-up of the so-called ‘Chinese cyberattacks’ without basis and the announcement of sanctions is outright political manipulation and malicious slander,” the Chinese embassy in London said.
China has “never encouraged, supported or condoned cyberattacks” the embassy claimed.
It was a similar message from Wellington, where the Chinese embassy accused its hosts of “completely barking up the wrong tree.”
“As a matter of fact, China is a major victim of cyberattacks,” the embassy said.
The UK and the United States operate vast cyber operations of their own, although rarely acknowledge them in public.
The two nations, along with New Zealand, Australia and Canada are part of the Five Eyes intelligence sharing network.
