Security

Cyber-crime

Beijing's attack gang Volt Typhoon was a false flag inside job conspiracy: China

Run by the NSA, the FBI, and Five Eyes nations, who fooled infosec researchers, apparently


China has wildly claimed the Volt Typhoon gang, which Five Eyes nations accuse of being a Beijing-backed attacker that targets critical infrastructure, was in fact made up by the US intelligence community.

The nation's National Computer Virus Emergency Response Center, National Engineering Laboratory for Computer Virus Prevention Technology, and infosec vendor 360 Digital Security Group last week published a report [PDF] on Vault Typhoon titled "<Lie to me/>: A secret Disinformation Campaign targeting US Congress and Taxpayers conducted by US Government agencies."

That title probably tells you plenty of what you need to know about the report, which goes on to claim that everything you have read about Volt Typhoon is the result of a misinformation campaign planned and executed by the NSA, the FBI, and the Departments of Justice, Defense, Homeland Security, and Energy.

Intelligence agencies from the other Five Eyes nations – Australia, Canada, New Zealand and the UK – chimed in.

Infosec providers were manipulated – presumably so they found fake evidence of Volt Typhoon's activities and then published material about it.

The object of the campaign was to secure re-authorization of the US's controversial Section 702 warrantless surveillance regime.

The real victims, therefore, were the American people – as Section 702 allows warrantless surveillance of some communications sent by some citizens.

Such invasions of privacy are obviously offensive to China, where all citizens' communications are always subject to warrantless surveillance.

Read the rest if you want: It tells a tale of how FBI director Christopher "Wary" – a delicious mis-spelling of his actual surname, Wray – gave a speech on April 18 in which he mentioned Volt Typhoon compromising critical infrastructure operators in the US.

Wray, for what it is worth, had earlier labelled Section 702 as the US's best defense against Chinese hacking groups.

In China's telling, Wray's April speech was propaganda, the media fell for it, the body politic all decided Beijing is doing nasty things in cyberspace, and opposition to the extension of Section 702 melted away.

But the document's clever authors saw through the plot. Their take on the speech notes inconsistencies in Wray's remarks that offer clues to the vast conspiracy.

Sadly, the theory advanced in the document does not include lizard people, magic bullets, or fake Moon landings.

The document concludes with a warning to peaceful nations of the world that Section 702's existence, and extension, is evidence that the US is an aggressive global hegemon and an "Empire of Hacking" intent on keeping China down.

If the phrase "Empire of Hacking" seems familiar, it's because the authors of this piece have already used it to describe US activities revealed in Wikileaks' 2017 "Vault 7" infodump that revealed the CIA has developed tools to attack common operating systems.

As you would expect any intelligence agency to do in this digital age. ®

Send us news
30 Comments

China is beating the world at scientific research, think tank finds

Could monopolise 24 key techs if current trends continue

China's chip tech still lags the West – by up to five generations

Think tank warns US and friends they can't assume Beijing won't catch up

China AI devs use cloud services to game US chip sanctions

Orgs are accessing restricted tech, raising concerns about more potential loopholes

Chinese broadband satellites may be Beijing's flying spying censors, think tank warns

Ground stations are the perfect place for the Great Firewall to block things China finds unpleasant

China outspending US, Taiwan, and South Korea combined on chipmaking kit

$25B semiconductor shopping spree leaves rivals in the dust

Shein, Temu escalate epic e-commerce squabble

Chinese fast fashion slingers get their Spider-Man meme moment

US sues Georgia Tech over alleged cybersecurity failings as a Pentagon contractor

Rap sheet spells out major no-nos after disgruntled staff blow whistle

EU tries to pin down China on definition of 'important data'

Rules on cross border data transfers have European businesses scratching their heads

When it comes to cloud, it's China against the world

Amazon, Microsoft, and Google dominate the west, but the Middle Kingdom plays by its own rules

Volt Typhoon suspected of exploiting Versa SD-WAN bug since June

The same Beijing-backed cyber spy crew the feds say burrowed into US critical infrastructure

Novel attack on Windows spotted in phishing campaign run from and targeting China

Resources hosted at Tencent Cloud involved in Cobalt Strike campaign

One of China's best GPU prospects admits it's failing, lays off workers

Needs new investors to get beyond current modest products