September 07, 2012
Credit: Credit: Elbit Systems
The hacker group that attacked Google Inc in 2009 has launched hundreds of other cyber assaults since then, focusing on U.S. defense companies and human rights groups, according to new research from security software maker Symantec Corp.
Google said in January 2010 that it and more than 20 other companies were the victims of a sophisticated cyber attack -- later dubbed Operation Aurora -- from China-based hackers that resulted in the theft of intellectual property.
Although the hackers were never publicly identified, the incident heightened tensions between Washington and Beijing over growing evidence that a significant number of cyber attacks against U.S. institutions originated from China.
“It was big news at the time, but what people don’t realize is that this is happening constantly,” said Eric Chien, a manager in Symantec’s research group. “They haven’t gone away, and we wouldn’t expect them to go away.”
Symantec said on Friday the hackers behind Operation Aurora have focused on stealing intellectual property, such as design documents from defense contractors and their suppliers, including shipping, aeronautics, arms, energy, manufacturing, engineering and electronics companies.
The hackers used components of a common infrastructure that Symantec termed the “Elderwood Platform,” named after a word repeatedly found in the software code used in different attacks.
Over the past year, the Elderwood hackers have focused almost exclusively on stealing data from companies that supply parts to big defense contractors, rather than targeting the firms themselves, Chien said.
The second most common group of targets was non-government organizations involved in Tibetan human rights issues. Financial firms and software companies were also targeted, Symantec said.
The security firm, which sells anti-virus software to corporations and consumers under the Symantec and Norton brands, declined to identify specific victims and noted that it did not have evidence to prove the attacks originated from China.