TOKYO: US National Security Agency, Federal Bureau of Investigation and Japanese police jointly warned multinational companies of China-linked hacker group BlackTech in a cybersecurity advisory.
The joint advisory, which also came from the US Cybersecurity and Infrastructure Security Agency and its Japanese counterpart, urged firms to review the internet routers at their subsidiaries to minimise the risk of potential attack from the group.
“BlackTech has demonstrated capabilities in modifying router firmware without detection and exploiting routers’ domain-trust relationships to pivot from international subsidiaries to headquarters in Japan and the United States, which are the primary targets,” the statement said.
BlackTech has been engaging in cyberattacks on governments and tech-sector companies in the United States and East Asia since around 2010, Japan’s National Police Agency said in a separate statement.
Read more: Apple, China met to discuss Beijing’s crackdown on western apps
In 2020, self-ruled Taiwan’s security authority reported cyberattacks to some 6,000 government officials’ email accounts from BlackTech and another hacking group Taidoor, saying both were likely backed by the Chinese Communist Party.
Amid heightening US-China tensions over issues including Taiwan, US security officials are raising the tone of their warnings against China’s cyberattack capabilities. FBI chief Chris Wray earlier this month said China “has a bigger hacking programme than every other major nation combined”.
In May, cybersecurity authorities of Australia, Canada, New Zealand and the United Kingdom joined the US agencies in issuing an advisory on China’s “state-sponsored cyber actor”.
