UK accuses Chinese hackers of hacking millions of voters’ data

LONDON — The United States and Britain on Monday accused hackers linked to the Chinese government of being behind “malicious” cyber campaigns targeting politicians, a move expected to heighten tensions with Beijing.

The British government also claimed that hackers linked to China were behind the attack that saw the data of millions of voters stolen.

Speaking in Parliament on Monday, UK Deputy Prime Minister Oliver Dowden said: “I can today confirm that state-affiliated actors in China were responsible for two malicious cyber campaigns targeting our democratic institutions and MPs.”

Dowden blamed a hack of the Electoral Commission, the independent body responsible for setting standards for how British elections are conducted, on a Chinese government affiliate. The activities are said to have taken place between 2021 and 2022.

The Electoral Commission discovered the attack in October 2022, but it was not disclosed until last year. The Electoral Commission said in a report that hackers obtained the names and addresses of anyone registered to vote in the UK between 2014 and 2022. 2023 Announcement.

A spokesman for the Chinese Embassy in the UK said the accusations that China launched cyber attacks in the UK were “completely fabricated and maliciously slanderous”.

“We strongly reject such accusations,” a Chinese embassy spokesman told reporters at a press conference on Monday, according to a source. renew This information has been posted on its website. “China has always resolutely cracked down on all forms of cyber attacks in accordance with the law.”

“Clear Pattern”

Dowden said that the UK believed that China was behind the reconnaissance of British MPs’ email accounts in the summer of 2021. He accused the Chinese hacker group APT31 of being behind the attack.

Mandiant, a cybersecurity company owned by Google, described APT31 as a “China-linked cyber espionage operation focused on obtaining information that can provide political, economic and military advantages to the Chinese government and state-owned enterprises.”

Dowden added that attempts to compromise the email accounts of British lawmakers had been “unsuccessful”.

“We now want to be as open as possible to the House and the British public,” Dowden said. “This is the latest in a clear pattern of hostile activity originating from China.”

Dowden said the UK has imposed sanctions on two individuals residing in China, as well as APT31-affiliated entities.

US slams China

Separately, the U.S. Department of Justice released an indictment on Monday accusing Chinese state-linked hackers of supporting cyber activities targeting U.S. businesses, government officials and politicians.

The U.S. Department of Justice charged seven Chinese citizens, Ni Gaobin; Weng Ming; Cheng Feng; Peng Yaowen; Sun Xiaohui; Wang Xiong; and Zhao Guangzong, with conspiracy to commit computer intrusions and wire fraud for their participation in a Chinese hacker group that spent 14 years targeting U.S. and foreign critics, businesses and political officials.

The U.S. Department of Justice said these individuals were part of the APT31 hacking group.

“The Department of Justice will not tolerate the Chinese government’s efforts to intimidate Americans who serve the public, silence dissidents protected by U.S. law, or steal from American businesses,” Attorney General Merrick B. Garland said this week. One said in a statement.

Garland added: “This case is a reminder of the Chinese government’s willingness to target and intimidate critics, including by launching malicious cyber operations designed to threaten the national security of the United States and its allies.”

geopolitical tensions

The British and American statements are likely to draw the ire of Beijing.

Relations between the UK and China have deteriorated for years, particularly in the technology sector, after the British government took actions aimed at curbing national security risks from Chinese technology companies.

“The impact of a breach like this on UK-China relations could be far-reaching,” Javvad Malik, chief security awareness advocate at cybersecurity firm KnowBe4, told CNBC via email on Monday.

“This could escalate tensions, lead to diplomatic tensions and could lead to retaliatory actions in the cyber domain or other areas of bilateral cooperation.”

Malik added that the situation “requires a robust response that not only protects compromised systems and prevents further breaches, but also strengthens the international legal and norm-based system that governs state behavior in cyberspace.”

“To mitigate the consequences and prevent future incidents, countries must invest in stronger cybersecurity defenses, international cooperation and develop capabilities to deter adversaries in cyberspace,” he said.

Some hawkish MPs have been pressuring the British government to take tougher action against China.

The Inter-Parliamentary China Alliance, a cross-border group of lawmakers seeking to reform China policy, posted on social media platform X on Monday that they, along with other lawmakers, activists and dissidents, had “received sanctions.” We have been experiencing harassment, impersonation and attempted hacking from China for some time. “

The organization said: “We take this opportunity to emphasize that, although extremely unpopular, our discomfort pales in comparison to the Chinese dissidents who risk their lives against the Chinese Communist Party. It is they who now gain access to the host government. It’s time for more support.”

For example, in 2020, the British government banned the use of Huawei’s telecom equipment in its 5G mobile network, citing espionage concerns. Huawei denies the accusations and says it will not cooperate with China in spying on Western communications.