China already broke its pledge to stop hacking American corporations

I’m sure you remember that big cybersecurity agreement that China and the United States made a few weeks ago, and I’m sure you’ll also remember how virtually nobody actually expected either of the two countries to respect the agreement for very long. That being said, it’s still surprising how quick China was to break its pledge to stop using cyberattacks to steal information from American corporations, with reports claiming that Chinese hackers resumed their cyberattacks against American corporations less than a day after China made the agreement. 

Three weeks ago, US president Barack Obama and Chinese president Xi Jinping made a groundbreaking announcement in the White House Rose Garden—both governments pledged to stop supporting cyber theft of the other country’s corporate intelligence. Just one day after that deal was made public, entities affiliated with the Chinese government attempted to hack into a US tech company, according to data security company CrowdStrike. Several US pharmaceutical and tech companies have been attacked since, CrowdStrike says. The hackers are looking for corporate intelligence, Dmitri Alperovitch, co-founder of CrowdStrike, said in an Oct. 19 post on the company’s website: “…the primary benefit of the intrusions seems clearly aligned to facilitate theft of intellectual property and trade secrets, rather than to conduct traditional national-security related intelligence collection which the Cyber agreement does not prohibit.” Many of the attacks were made through web servers, using SQL, a programming language used to gather data. No intellectual property was stolen during any of the attacks, CrowdStrike said. Still, “the very fact that these attempts occurred highlights the need to remain vigilant despite the newly minted Cyber agreement,” Alperovitch said.