In a significant cyber intrusion, Chinese state-sponsored hackers have breached the U.S. Treasury Department’s computer systems, according to a Reuters report. Described as a “major incident” by the department, the attack was facilitated through BeyondTrust, a third-party cybersecurity provider. The breach involved hackers obtaining a crucial digital security key from BeyondTrust, which allowed them to circumvent defenses on a cloud-based service employed by the Treasury for technical support. Consequently, the attackers accessed certain user workstations and extracted unclassified documents.
BeyondTrust, headquartered in Georgia, publicly acknowledged the breach on its website, stating that it impacted a limited number of its clients. The company is actively investigating the incident but has not provided further comments. The Treasury Department was alerted to the breach on December 8 by BeyondTrust and is collaborating with the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) to assess the extent of the damage. While the CISA has deferred inquiries back to the Treasury Department, the FBI has yet to comment.
A representative of the Chinese Embassy in Washington denied any involvement, criticizing the U.S. for making baseless accusations against China. However, cybersecurity expert Tom Hegel from SentinelOne noted that the attack aligns with a familiar pattern in Chinese hacking operations, which frequently target trusted third-party services—a tactic increasingly prevalent in recent years.
This incident underscores the escalating risks associated with dependency on third-party vendors for vital security services, highlighting vulnerabilities that could have significant national security implications.
Original Source: https://indianexpress.com/article/world/us-treasury-says-chinese-hackers-stole-documents-9752364/
Category : World
Tags:
Publish Date: 2024-12-31 05:16:00
