English 
Spanish 
3 min read
0 comments
Chinese state-sponsored cyberattack compromises third-party provider, allows access to US Treasury computers and exposes critical vulnerabilities in the world's largest power's digital security.
Recently, state-sponsored Chinese hackers managed to break into the systems of the US Treasury Department, according to Xataka. This incident is not just an isolated attack, but a sobering reminder of the fragility of the world’s largest power’s cybersecurity. How did this happen? And more importantly, what does this mean for the future of digital security?
How did Chinese hackers manage to break into the system?
The attack was enabled by a vulnerability in a third-party provider, BeyondTrust, which is responsible for protecting remote technical support systems. A stolen access code was the key for the hackers. access remotely computers used by Treasury officials, allowing the theft of non-confidential documents.
BeyondTrust is a renowned security company, but even the best systems have flaws. By compromising this company, Chinese hackers demonstrated how the digital supply chain can be a weak link, even for high-profile organizations. This oversight had serious consequences, showing that even the most advanced systems can be exploited.
- Bermuda Triangle Mystery: Scientists Reveal How Giant Waves and Gulf Stream Make Ships and Planes Disappear
- How the system that transforms water treatment and distribution infrastructures into electricity generators works
- Malaysia to introduce glow-in-the-dark paint for highways, but cost could jeopardize project
- UK invests R$1,7 billion in powerful supercomputer to challenge US and Chinese dominance in drug discovery
Immediate reactions and measures of the US government
Once the breach was discovered, authorities acted quickly. The compromised system was shut down, and an investigation was launched by CISA, the FBI, and other entities. The goal was to determine the scope of the attack and find those responsible.
Early reports confirmed that the attack was orchestrated by a Chinese hacking group classified as an APT (advanced persistent threat). Such operations are known for their sophisticated techniques and for hiding behind systems for long periods, which increases the potential damage.
The recurrence of Chinese cyberattacks on the US
The hack is just one example in a growing pattern of Chinese cyberattacks against the US. In 2023, for example, hackers leaked about 60 State Department emails. Another high-profile incident involved the Salt Typhoon group, which managed to infiltrate telecom carriers and even presidential hotlines.
The Treasury Department plays a vital role in the global economy, overseeing sensitive data and implementing economic sanctions. During the Russian invasion of Ukraine, the agency was instrumental in enforcing sanctions against Chinese companies, making it an attractive target for cybercriminals.
This attack by Chinese hackers has revealed the urgent need to strengthen security in third-party systems. It has highlighted that even the world's greatest powers face significant challenges in the field of cybersecurity.
Protecting against hacks requires robust preventive measures, such as regular security audits, employee training, and collaboration between private companies and government agencies. Investing in emerging technologies and defensive strategies can be key to avoiding future digital disasters.
The hacking of the US Treasury Department by Chinese hackers is a stark reminder that no organisation is immune to cyberattacks, even in countries with vast resources. As the global landscape becomes more connected, digital security will become a battleground increasingly strategic. Are we ready to face it?
