OTTAWA -- The federal government is blaming Chinese state-sponsored cyber activity for a recent 鈥渦nprecedented and indiscriminate exploitation鈥� of Microsoft exchange servers, in an attack they say continues to put Canadians鈥� intellectual property and personal information at risk.
In a joint statement issued Monday, Foreign Affairs Minister Marc Garneau, Defence Minister Harjit Sajjan, and Public Safety Minister Bill Blair said Canada is 鈥渃onfident鈥� that China's Ministry of State Security (MSS) was behind the recent Microsoft Exchange Server hack.
鈥淐anada believes it is highly likely that this cyber activity was intended to gain access to networks worldwide for the theft of intellectual property and to acquire vast quantities of personally identifiable information,鈥� the statement reads.
While Microsoft addressed vulnerabilities in its exchange servers in early March, the statement warns the risk 鈥減ersists in some cases even when patches from Microsoft have been applied.鈥�
On Monday, the Biden administration issued a statement pointing blame at China, stating that it would hold the country 鈥渁ccountable for its pattern of irresponsible, disruptive, and destabilising behaviour in cyberspace, which poses a major threat to our economic and national security.鈥�
Meanwhile, the U.S. Justice Department announced charges against four Chinese nationals who prosecutors said were working with the MSS in a hacking campaign that targeted dozens of computer systems, including companies, universities and government entities.
The European Union and Britain also issued similar statements Monday. The EU said malicious cyber activities with "significant effects" that targeted government institutions, political organizations and key industries in the bloc's 27 member states could be linked to Chinese hacking groups. The U.K.'s National Cyber Security Centre said the groups targeted maritime industries and naval defence contractors in the U.S. and Europe, as well as the Finnish parliament.
The North Atlantic Treaty Organization weighed in too, underlining its member objectives to 鈥渁ct responsibly鈥� in the international system including cyberspace.
鈥淩eaffirming NATO鈥檚 defensive mandate, the Alliance is determined to employ the full range of capabilities, as applicable, at all times to actively deter, defend against, and counter the full spectrum of cyber threats, in accordance with international law. NATO will continue to adapt to the evolving cyber threat landscape, which is affected by both state and non-state actors, including state-sponsored,鈥� a statement reads.
The Canadian statement notes that the hacker group it believes responsible for the Microsoft attack is also linked to separate cyber campaigns, in 2017 and 2018, that targeted defence, ocean technologies, and biopharmaceutical sectors.
鈥淐anada remains committed to working with partners to support the open, reliable and secure use of cyberspace and calls on China to act responsibly and cease this pattern of irresponsible and harmful cyberspace behaviour. These kinds of reckless actions cannot be accepted and tolerated by responsible state-actors,鈥� the statement reads.
The Canadian Centre for Cyber Security has also released about the Microsoft Exchange Server attack and guidance to prevent exploitation.
With files from The Associated Press.
