You're watching...

Tracking Chinese Hackers

Details

  • Description

    Mandiant founder Kevin Mandia on the China hacking U.S. business.

  • Duration 4:33
  • Date

Clips

Also in this playlist...

Latest Video

Auto-advance: ON

Auto-advance

Transcript

This transcript is automatically generated

The Chinese army charged with hacking into US businesses vulnerable US power -- government agencies.

And a -- have been traced back to a People's Liberation Army building.

Right near here in Shanghai having -- on the doorstep and these frightening charges come from a report from cyber security firm -- and and joining us now got a founder and chief executive.

Kevin -- India thanks for being with us Kevin so you -- -- -- I believe it is.

Since 2006 -- 140 different actual victims.

Corporate victims and and government to the cross multiple industries and you -- all the something that you call People's Liberation Army unit 61398.

What is that.

Well that's exactly right we did at an investigation.

Into over a hundred and watch its thousands of intrusions in the hundreds of companies in all the technical evidence that brings us back to a region in Shanghai.

Simultaneous to that investigation Dennis we were looking into publicly available documents that kept describing this unit.

61398.

Which is unit chartered with hiring folks who speak English and know what we call computer network operations in other -- are -- hackers he spoke English.

As we traced.

Thousands of attacks back to IP address is right in the same region.

We look at the totality of the circumstances in the mission of the unit the amount of IP addresses or computers being used to attack the US out of this region.

And the fact that it's a sustained effort for seven years using thousands of computers.

Let us to the conclusion that's just unavoidable it's in fact the government performing these intrusions.

Yes now it seems to be the Chinese economy is growing gangbusters anyway.

It felt like they need to steal stuff from the US so what is the real intent of these break -- is the Chinese army.

Testing for vulnerabilities now in case they need to shut down a power grid in Chicago they want to go to war with the US.

Someday.

Black can only tell you -- -- I've observed I've -- thousands of intrusions and I would say are being done from China or from the Chinese army.

And right now it's the steal our intellectual property to steal our innovation is steel how we managed business is.

And this deal with things that are involved in mergers and acquisitions in the -- Asia Pacific -- I have not seen evidence.

Destructive activities so we're losing the confidentiality -- data but we're not losing the integrity ever dated just yet.

We're not losing integrity of our data just yet well that's good.

Do the corporate and government and power grid victims of these break -- these thousands of break -- that you have traced to China.

Do they even know what do they sometimes I didn't realize they've been hacked.

-- they do know it now on many cases they're not aware but they have what I call that awakening moment where.

They were pre awareness and and you see a government agency will tell them.

You've been compromise it's coming from China and here's the evidence so it's been our experience over the last eight years the government.

Of the United States has been the early warning system for victim companies but we've now had a growing family of victim organizations -- not say there's thousands of where organizations that have been compromised out of China that are now starting to work together to start addressing these problems -- toward.

26 bank's retail web sites disabled by attacks in the past four months FaceBook just fell victim 78% of breaches once they says -- on hotel in.

And -- restaurant industry.

The Chinese government's main defenses -- saying hey you guys in the US hack into our stuff all the time is that true.

Whether it's sure not -- considered a symmetrical battlefield if you wanna call it that -- in -- symmetrical.

Playing field.

And a reason why innovation is here where people rely on the Internet this year and it's just an unfair fight so we really don't gain much if we were hacking back there.

Other then what I call attribution.

But we're not -- there to do anything but the find our data.

Whereas if they're -- us they actually get intellectual property -- a tremendous.

And now a decade ago Forbes magazine we raised the fear that the next terrorist attack will be on electrical power grid that a lot of these systems are utterly.

Unguarded.

A decade later it's largely still the same right it's kind of bad that.

Thousands of tax -- little -- Well I'm not sure it's as bad as people realize that you see -- more where I've seen much greater safeguards -- grown up with this for twenty years have been in cyber security.

We're not getting -- that it.

We're actually getting better at it as a country.

The problem is we've gotten good enough now to say hey look we've got a problem where -- five years ago.

Ignorance was -- we weren't even good enough to be aware we were compromised -- -- -- on that hopeful that thanks very much for being with us Kevin -- spectacular voice --