Saturday, January 4, 2025
HomeComputer SecurityChinese Intelligence Officers Accused For Hacking the Jet Engine Manufacturing Data From...

Chinese Intelligence Officers Accused For Hacking the Jet Engine Manufacturing Data From U.S based Aviation Companies

Published on

SIEM as a Service

Chinese intelligence officers and conspirators who all are working under their guidance are alleged to hack the U.S and abroad based Sensitive Commercial Aviation and Technological data for more than 5 Years.

Zha Rong and Chai Men, Intelligence officers and other co-conspirators who all are working for Jiangsu Province Ministry of State Security (“JSSD”) are primarily responsible for domestic counter-intelligence, non-military foreign intelligence.

These conspirators involved various malicious activities including a steal, among other data, intellectual property and confidential business information, including information related to a turbofan engine used in commercial airliners.

- Advertisement - SIEM as a Service

A Team of Hackers who all are working for JSSD including  Zhang Zhang-Gui, Liu Chunliang, Gao Hong Kun, Zhuang Xiaowei, and Ma Zhiqi are involved in the theft of a turbofan engine used in the U.S. and European commercial airliners technology.

This engine has developed through a partnership between a French aerospace manufacturer, China, and a company that belongs to the United States.

JSSD haired an insider’s Gu Gen and Tian Xi, and used other conspirators hacked the French aerospace manufacturer and other company manufactured parts for the turbofan jet engine, including aerospace companies based in Arizona, Massachusetts and Oregon.

At the same time, China working to develop a comparable engine for use in commercial aircraft manufactured in China and elsewhere.

John C. Demers, Assistant Attorney General for National Security said, “For the third time since only September, the National Security Division, with its US Attorney partners, has brought charges against Chinese intelligence officers from the JSSD and those working at their direction and control for stealing American intellectual property,”

FBI Special Agent John Brown said, “The threat posed by Chinese government-sponsored hacking activity is real and relentless,”.

According to U.S Department of Justice, On October 10, the Department of Justice announced that a JSSD intelligence officer was extradited to the Southern District of Ohio, on charges that he attempted to steal trade secrets related to jet aircraft engines, and in September, in the Northern District of Illinois, a grand jury indicted a U.S. Army recruit who is accused of working as an agent of a JSSD intelligence officer, without notification to the Attorney General. 

In this case, Since 2010 hackers used a various hacking method such as spear phishing, sowing multiple different strains of malware into company computer systems, using the victim companies’ own websites as “watering holes” to compromise website visitors’ computers and domain hijacking through the compromise of domain registrars.

Apart from this JSSD also used insider threats Tian Xi and Gu Gen who were employed by the French aerospace company, later the receive the malware from JSSD and infect one of their companies computer.

Later they also remove the malware footprints and delete the C&C Server link which is used to receive the malware from JSSD and they did the same in other aviation companies in the U.S.

Likewise, various cybercrime activities are registered against these conspirators and the defendants are presumed innocent unless and until proven guilty. Official said.

Also Read:

Hacking vs Spying: How puzzling it is to Find the Hackers in Cyber World

Stop DDoS Attacks In 10 Seconds – Organization’s Most Important Consideration for DDOS Attack Mitigation

DDoS Attack Prevention Method on Your Enterprise’s Systems – A Detailed Report

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

LegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware

LegionLoader, a C/C++ downloader malware, first seen in 2019, delivers payloads like malicious Chrome...

ASUS Critical Vulnerabilities Let Attackers Execute Arbitrary Commands

In a recent security advisory, ASUS has alerted users to critical vulnerabilities affecting several...

NTT Docomo Hit by DDoS Attack, Services Disrupted for 11 Hours

NTT Docomo, one of Japan’s leading telecommunications and IT service providers, experienced a massive...

Apple Agrees to $95M Settlement Over Siri Privacy Lawsuit

Apple Inc. has agreed to pay $95 million to settle a proposed class-action lawsuit...

API Security Webinar

72 Hours to Audit-Ready API Security

APIs present a unique challenge in this landscape, as risk assessment and mitigation are often hindered by incomplete API inventories and insufficient documentation.

Join Vivek Gopalan, VP of Products at Indusface, in this insightful webinar as he unveils a practical framework for discovering, assessing, and addressing open API vulnerabilities within just 72 hours.

Discussion points

API Discovery: Techniques to identify and map your public APIs comprehensively.
Vulnerability Scanning: Best practices for API vulnerability analysis and penetration testing.
Clean Reporting: Steps to generate a clean, audit-ready vulnerability report within 72 hours.

More like this

LegionLoader Abusing Chrome Extensions To Deliver Infostealer Malware

LegionLoader, a C/C++ downloader malware, first seen in 2019, delivers payloads like malicious Chrome...

ASUS Critical Vulnerabilities Let Attackers Execute Arbitrary Commands

In a recent security advisory, ASUS has alerted users to critical vulnerabilities affecting several...

NTT Docomo Hit by DDoS Attack, Services Disrupted for 11 Hours

NTT Docomo, one of Japan’s leading telecommunications and IT service providers, experienced a massive...