The New York Times says it has fallen victim to hackers possibly connected to China's military. Source: AAP
THE New York Times says it has fallen victim to hackers possibly connected to China's military, linking the attacks to its expose of the vast wealth amassed by a top leader's family.
The hackers have during the past four months infiltrated computer systems and snatched staff passwords, and their probing has been particularly focused on the emails of Shanghai bureau chief David Barboza, the newspaper said on Wednesday.
According to a Barboza story published on October 25, close relatives of Chinese Premier Wen Jiabao had made billions of dollars in business dealings.
"Chinese hackers, using methods that some consultants have associated with the Chinese military in the past, breached The Times's network," the newspaper said, citing a wealth of digital evidence gathered by its security experts.
The newspaper said the IT consultants believed the attacks "started from the same university computers used by the Chinese military to attack United States military contractors in the past".
The hackers stole corporate passwords and targeted the computers of 53 employees including former Beijing bureau chief Jim Yardley, who is now the Times's South Asia bureau chief based in India.
"Experts found no evidence that the intruders used the passwords to seek information that was not related to the reporting on the Wen family," the newspaper said, adding that no customer data was stolen.
The Times said the hackers appeared to be looking for "the names of people who might have provided information to Mr Barboza", but said there was no evidence that sensitive emails or files from the reporting were compromised.
The paper said that with the help of outside computer experts, it had managed to kick out the intruders and prevent them from breaking into its systems again.
"They could have wreaked havoc on our systems," Times chief information officer Marc Frons said of the hackers. "But that was not what they were after."
The Times said Bloomberg News was also targeted by Chinese hackers, after publishing in June a report on the wealth accumulated by relatives of Xi Jinping. In November, Xi was elevated to leader of the Chinese Communist Party.
The Times asked AT&T, which monitors its computer network, to watch for unusual activity after learning of warnings from Chinese officials that its investigation into the Wen family's wealth would have "consequences".
It also briefed the Federal Bureau of Investigation on the hacking. But with the attacks persisting after the Wen investigation was published, the Times hired IT security firm Mandiant on November 7.
"If you look at each attack in isolation, you can't say, 'This is the Chinese military'," said Mandiant chief security officer Richard Bejtlich.
But he added: "When you see the same group steal data on Chinese dissidents and Tibetan activists, then attack an aerospace company, it starts to push you in the right direction."
China's Ministry of National Defence denied any government link to the intrusions, telling the Times that "to accuse the Chinese military of launching cyberattacks without solid proof is unprofessional and baseless".
AFP in Beijing sought further comment from China's internet regulator, but there was no immediate response. In October, the foreign ministry accused the New York Times of having "ulterior motives" and trying to "smear" China.
The newspaper's report at the time said investments by Wen's son, wife and others spanning the banking, jewellery and telecom sectors were worth at least $US2.7 billion ($A2.61 billion). The nytimes.com website has been blocked in China ever since.
China on Thursday dismissed accusations that it had hacked into the computer system of the New York Times.
"The competent Chinese authorities have already issued a clear response to the groundless accusations made by the New York Times," foreign ministry spokesman Hong Lei told reporters in Beijing.
Asked about cyberspying and hacking accusations made against China in general, he said: "To arbitrarily assert and to conclude without hard evidence that China participated in such hacking attacks is totally irresponsible.
"China is also a victim of hacking attacks. Chinese laws clearly forbid hacking attacks, and we hope relevant parties takes a responsible attitude on this issue."