Chinese Hackers Breached Foreign Ministers' Emails, Palo Alto Says
A years-long hacking campaign targeting the communications of diplomats worldwide has been uncovered by researchers at cybersecurity firm Palo Alto Networks. The attackers accessed Microsoft Exchange email servers, allowing them to search for information on key terms related to a 2022 China-Arab summit in Riyadh, Saudi Arabia.
According to Lior Rochberger, senior researcher at Palo Alto Networks' Unit 42 threat intelligence division, the hackers specifically searched for names such as Chinese President Xi Jinping and his wife, Peng Liyuan, in the context of that summit. The researchers declined to identify which countries had their systems breached but noted that the group's targeting patterns align with China's economic and geopolitical interests.
The hacking campaign, which began nearly three years ago, was discovered by Palo Alto Networks' Unit 42 team. "We've been tracking this group for a while now," Rochberger said in an interview. "Their tactics are sophisticated, but we're able to identify their patterns and alert our customers accordingly."
Background on the China-Arab summit is essential context for understanding the hacking campaign's motivations. The summit was a significant diplomatic event, with Chinese President Xi Jinping attending alongside Arab leaders. The hackers' interest in searching for information related to this event suggests that they were seeking sensitive information about China's diplomatic efforts.
Experts say that the breach highlights the need for improved cybersecurity measures among foreign ministries worldwide. "This is a wake-up call for governments and diplomats," said Dr. Maria Rodriguez, a cybersecurity expert at Georgetown University. "They need to take steps to protect their communications from these types of attacks."
Palo Alto Networks has notified its customers about the hacking campaign and provided guidance on how to mitigate potential risks. The company's researchers are continuing to monitor the situation and provide updates as more information becomes available.
The breach raises questions about China's role in the hacking campaign, but officials have declined to comment directly. However, a spokesperson for the Chinese Embassy in Washington, D.C., stated that "China is committed to maintaining cyber security and protecting the rights of other countries."
As the situation continues to unfold, diplomats and cybersecurity experts are urging governments to take action to prevent similar breaches in the future.
*Reporting by It.*
