China hackers infiltrate The New York Times

For the last four months, Chinese hackers have persistently attacked New York Times, infiltrating computer systems and getting passwords for reporters and other employees.

After surreptitiously tracking the intruders to study their movements and help erect better defences to block them, The Times and computer security experts have expelled the attackers and kept them from breaking back in.

The timing of the attacks coincided with the reporting for a Times investigation, published online on October 25, that found that relatives of Wen Jiabao, China’s prime minister, had accumulated a fortune worth several billion dollars through business dealings.

Security experts hired by Times to detect and block the attacks gathered digital evidence that Chinese hackers, using methods that some consultants have associated with the Chinese military in the past, breached The Times’s network. They broke into the e-mail accounts of its Shanghai bureau chief, David Barboza, who wrote the reports on Wen’s relatives, and Jim Yardley, former Beijing bureau chief.

The hackers tried to cloak the source of the attacks on The Times by first penetrating computers at US universities and routing attacks through them, said computer security experts at Mandiant, the company hired by The Times. This matches the subterfuge used in many other attacks that Mandiant has tracked to China.

Asked about evidence indicating the hacking began in China, and possibly with the military, China’s Ministry of National Defence said “to accuse Chinese military of launching cyberattacks without solid proof is unprofessional and baseless”.

Attack account

After The Times learned of warnings from

... contd.