News: China Cyber Attack On Power Grid Near Ladakh Between Aug-March: Report
New Delhi:
Chinese state-sponsored hackers targeted Indian electricity distribution centres near Ladakh over the last eight months, a report by private intelligence firm Recorded Future said on Wednesday, in a new potential flashpoint following a protracted military standoff between the two countries in the region.
”In recent months, we observed likely network intrusions targeting at least seven Indian State Load Despatch Centres (SLDCs) responsible for carrying out real-time operations for grid control and electricity dispatch within these respective states. Notably, this targeting has been geographically concentrated, with the identified SLDCs located in North India, in proximity to the disputed India-China border in Ladakh,” the group said.
The attacks took place between August last year and March, sources said. The investigation found the data passing in and out of Indian Load Despatch Centres to the Chinese state-sponsored command and control servers spread across the world, they said.
“In addition to the targeting of power grid assets, we also identified the compromise of a national emergency response system and the Indian subsidiary of a multinational logistics company by the same threat activity group,” Recorded Future said.
The group said they alerted the government of their findings before publishing the report.
According to the intelligence firm, considered to be among the world’s largest with a specialisation in identifying threats from state-sponsored hackers, the Chinese attackers were trying to gather information surrounding critical infrastructure systems.
”Given the continued targeting of State and Regional Load Despatch Centres in India over the past 18 months, first from RedEcho and now in this latest TAG-38 activity, this targeting is likely a long-term strategic priority for select Chinese state-sponsored threat actors active within India,” it said.
”The prolonged targeting of Indian power grid assets by Chinese state-linked groups offers limited economic espionage or traditional intelligence-gathering opportunities. We believe this targeting is instead likely intended to enable information gathering surrounding critical infrastructure systems or is pre-positioning for future activity,” it added.
”The objective for intrusions may include gaining an increased understanding into these complex systems in order to facilitate capability development for future use or gaining sufficient access across the system in preparation for future contingency operations,” Recorded Future said.
The group said in February last year, it had reported the compromise of 10 distinct Indian power sector organisations, including four of the five Regional Load Despatch Centres (RLDC), two ports, a large generation operator, and other operational assets.
India and China have long disputed their vast 3,500-km-long frontier and fought a brief border war in Arunachal Pradesh in 1962.
Tensions flared in 2020 after a lethal high-altitude skirmish in the far-northern region of Ladakh, which saw hand-to-hand combat between troops in the contested Galwan Valley.
Since then, multiple rounds of talks have had limited success in de-escalating tensions and both sides have reinforced the region with additional military hardware and thousands of extra soldiers.
Last month, India said ties with China could not be normal until their troops pulled back from each other, but Beijing struck a conciliatory note during a meeting of their foreign ministers in New Delhi.
Source: https://www.ndtv.com/india-news/chinese-state-sponsored-hackers-targeted-indian-electricity-dispatch-centres-near-ladakh-recorded-future-inc-report-2867638
