国家安全机关破获美国国家安全局重大网络攻击案

Core Viewpoint - The article highlights a significant cyber attack by the U.S. National Security Agency (NSA) against China's National Time Service Center, revealing a systematic and long-planned effort to infiltrate and disrupt critical infrastructure in China [3][5]. Group 1: Cyber Attack Details - The NSA's cyber attack activities against the National Time Service Center began on March 25, 2022, exploiting vulnerabilities in a foreign brand's mobile SMS service to control the mobile devices of several staff members and steal sensitive information [5]. - From April 18, 2023, the NSA repeatedly used stolen login credentials to infiltrate the center's computer systems, probing into the network system's construction [5]. - Between August 2023 and June 2024, the NSA deployed a new cyber warfare platform, utilizing 42 specialized cyber attack tools to conduct high-intensity attacks on multiple internal network systems of the National Time Service Center [5]. Group 2: Attack Methods and Countermeasures - The NSA typically launched cyber attacks during late night to early morning Beijing time, using virtual private servers from the U.S., Europe, and Asia to obscure the source of the attacks [8]. - The agency employed forged digital certificates to bypass antivirus software and used strong encryption algorithms to erase traces of the attacks, demonstrating a high level of sophistication in their cyber operations [8]. - In response, China's national security agencies collected evidence of the attacks, guided the National Time Service Center in conducting inspections and countermeasures, severed attack links, and upgraded preventive measures to eliminate potential threats [8]. Group 3: Broader Implications of U.S. Cyber Activities - The article criticizes the U.S. for promoting cyber hegemony and violating international cyber space rules, with the NSA leading efforts to conduct cyber attacks against various regions, including China, Southeast Asia, Europe, and South America [10]. - The U.S. has been accused of using its technological bases in the Philippines, Japan, and Taiwan to launch cyber attacks, aiming to conceal its actions and misattribute blame to others [10]. - The article asserts that the U.S. is the true "hacker empire," undermining global cyber security while simultaneously accusing China of cyber threats to distract from its own activities [10].