CHINA’S SPYWARE CODE COPIED FROM NSA HACKING TOOLS
Chinese spies used code first developed by the US National Security Agency (NSA) to support their hacking operations, Israeli researchers said, an indication of how malicious software developed by governments can boomerang against their creators, Raphael Satter reported for Reuters.
Tel Aviv-based Check Point Software Technologies issued a report noting that some features in a piece of China-linked malware it dubs “Jian” were so similar they could only have been stolen from some of the NSA break-in tools leaked to the internet in 2017. Yaniv Balmas, Checkpoint’s head of research, called Jian “kind of a copycat, a Chinese replica.”
The find comes as some experts argue that American spies should devote more energy to fixing the flaws they find in software instead of developing and deploying malicious software to exploit it. The NSA declined comment. The Chinese Embassy in Washington did not respond to requests for comment.
A person familiar with the matter said Lockheed Martin Corp. – which is credited as having identified the vulnerability exploited by Jian in 2017 – discovered it on the network of an unidentified third party. In a statement, Lockheed said it “routinely evaluates third-party software and technologies to identify vulnerabilities.”
Countries around the world develop malware that breaks into their rivals’ devices by taking advantage of flaws in the software that runs them. Every time spies discover a new flaw they must decide whether to quietly exploit it or fix the issue to thwart rivals and rogues.
That dilemma came to public attention between 2016 and 2017, when a mysterious group calling itself the “Shadow Brokers” published some of the NSA’s most dangerous code to the internet, allowing cybercriminals and rival nations to add American-made digital break-in tools to their own arsenals.
In 2012, Iran was able to hack the computer systems of a US agency responsible for personnel management and China eventually got information of 12.5 million US officials and employees that it used in exposing a US espionage ring in China.