The statement came after the White House said overnight that the Obama administration has repeatedly taken up its concerns about cyber-theft at the highest levels of the Chinese government, including with Chinese military officials.
The security company, Mandiant, identified the People’s Liberation Army’s Shanghai-based Unit 61398 as the most likely driving force behind the hacking. Mandiant said it believed the unit had carried out “sustained” attacks on a wide range of industries.
The Chinese Defence Ministry, which has already denied the charges, went further in a new statement, slamming Mandiant for relying on spurious data. “The report, in only relying on linking IP address to reach a conclusion the hacking attacks originated from China, lacks technical proof,” the ministry said in a statement on its website (www.mod.gov.cn). Everyone knows that the use of usurped IP addresses to carry out hacking attacks happens on an almost daily basis,” it added.
“Second, there is still no internationally clear, unified definition of what consists of a ‘hacking attack’. There is no legal evidence behind the report subjectively inducing that the everyday gathering of online (information) is online spying.”
As hacking is a cross-border, anonymous and deceptive phenomenon, by its very nature it is hard to work out exactly where hacks originated, it said.
Chinese Foreign Ministry spokesman Hong Lei, asked about the US taking up its concerns about hacking with Beijing, said: “China and the US have maintained communication over the relevant issue”.
Unit 61398 is located in Shanghai’s Pudong district and is staffed by perhaps thousands of people proficient in English as well as computer programming and network operations, Mandiant said in its report.
The unit had stolen “hundreds of terabytes of data from at least 141 organisations across a diverse set of industries beginning as early as 2006”, it said.
Most of the victims were located in the US, with smaller numbers in Canada and Britain. The information stolen ranged from details on mergers and acquisitions to the emails of senior employees, the company said.