{"id":151931,"date":"2013-02-25T23:30:28","date_gmt":"2013-02-26T07:30:28","guid":{"rendered":"http:\/\/chinadigitaltimes.net\/?p=151931"},"modified":"2013-02-25T23:30:28","modified_gmt":"2013-02-26T07:30:28","slug":"hackers-embed-virus-in-mandiant-report","status":"publish","type":"post","link":"https:\/\/chinadigitaltimes.net\/2013\/02\/hackers-embed-virus-in-mandiant-report\/","title":{"rendered":"Hackers Embed Virus in Mandiant Report"},"content":{"rendered":"
ZDNet’s Eileen Yu reported on Monday that hackers have distributed virus-infected versions of a report released last week by security firm Mandiant<\/strong><\/a> which linked the Chinese army to cyberattacks<\/a> on U.S. corporations:<\/p>\n When downloaded, the tainted versions would allow hackers to remotely control infected computers after users attempted to read the report which was released last week by U.S. IT security vendor, Mandiant.<\/p>\n A blog post by Symantec<\/a> said hackers used the report as “bait”, embedding a malware called, Trojan.Pidief, into fake reports which displayed a blank PDF document when opened. Unbeknownst to users, the tainted report would trigger the exploit code for Adobe Acrobat and Reader Remote Code Execution Vulnerability.<\/p>\n Symantec highlighted an e-mail in Japanese purported to be from someone in the media industry which contained a PDF attachment of the fake Mandiant report.<\/p><\/blockquote>\n Cybersecurity has become a wedge in Sino-U.S. relations in recent years, and lately the two sides have traded accusations of hacking<\/a>. The New York Times’ David Sanger reported earlier this week that the Obama administration is more willing than ever to call out the Chinese directly over the hacking issue<\/a><\/strong>:<\/p>\n Defining \u201cenemies\u201d in this case is not always an easy task. China is not an outright foe of the United States, the way the Soviet Union once was; rather, China is both an economic competitor and a crucial supplier and customer. The two countries traded $425 billion in goods last year, and China remains, despite many diplomatic tensions, a critical financier of American debt. As Hillary Rodham Clinton put it to Australia\u2019s prime minister in 2009 on her way to visit China for the first time as secretary of state, \u201cHow do you deal toughly with your banker?\u201d<\/p>\n In the case of the evidence that the People\u2019s Liberation Army is probably the force behind \u201cComment Crew,\u201d the biggest of roughly 20 hacking groups that American intelligence agencies follow, the answer is that the United States is being highly circumspect. Administration officials were perfectly happy to have Mandiant, a private security firm, issue the report tracing the cyberattacks to the door of China\u2019s cybercommand; American officials said privately that they had no problems with Mandiant\u2019s conclusions, but they did not want to say so on the record.<\/p>\n …<\/p>\n In the next few months, American officials say, there will be many private warnings delivered by Washington to Chinese leaders, including Xi Jinping, who will soon assume China\u2019s presidency. Both Tom Donilon, the national security adviser, and Mrs. Clinton\u2019s successor, John Kerry, have trips to China in the offing. Those private conversations are expected to make a case that the sheer size and sophistication of the attacks over the past few years threaten to erode support for China among the country\u2019s biggest allies in Washington, the American business community.<\/p>\n \u201cAmerica\u2019s biggest global firms have been ballast in the relationship\u201d with China, said Kurt M. Campbell, who recently resigned as assistant secretary of state for East Asia to start a consulting firm, the Asia Group, to manage the prickly commercial relationships. \u201cAnd now they are the ones telling the Chinese that these pernicious attacks are undermining what has been built up over decades.\u201d<\/p><\/blockquote>\n