The United States, Britain and New Zealand accused Beijing-backed cyber groups of orchestrating a string of attacks against legislators and crucial democratic institutions, allegations that prompted angry Chinese denials.
In rare and detailed public accusations against China, Washington, London and Wellington described a series of cyber breaches over the last decade or more, in what appeared to be a concerted effort to hold Beijing accountable.
The US Justice Department charged seven Chinese nationals over what it said was a 14-year “prolific global hacking operation” designed to aid China’s “economic espionage and foreign intelligence objectives.”
Deputy Attorney General Lisa Monaco on Monday said the campaign involved more than 10,000 emails being sent, targeting US and foreign-based businesses, politicians, candidates for elected office and journalists.
Washington said a unit, dubbed APT31, was behind the attacks, describing it as a “cyberespionage program” run by China’s powerful Ministry of State Security out of the central city of Wuhan.
The hackers gained access to “email accounts, cloud storage accounts, and telephone call records” the Justice Department said, monitoring some accounts for “years”.
Hours later, London said that from 2021-2022 the same APT31 group had targeted UK lawmakers’ accounts, including many who were critical of Beijing’s policies.
With Britain expected to hold a general election within months, UK Deputy Prime Minister Oliver Dowden also made a shock announcement that “a Chinese state-affiliated entity” had likely “compromised” the country’s Electoral Commission.
In a parallel announcement, New Zealand on Tuesday said its Parliamentary Counsel Office, which drafts and publishes laws, had been compromised around the same period.
New Zealand, normally one of China’s strongest backers in the West, blamed the Chinese “state-sponsored group” APT40 for the attack.
