China and Russia Biggest Cyber Offenders Since 2006, Report Shows

As much as $600 billion is annually lost to cybercrime as attackers are becoming increasingly sophisticated in their approach, adopting new technologies and leveraging black markets and digital currencies.

A few countries, however, stand out as the most active sources of attacks in cyberspace.

[MORE: 10 Countries With the Fastest Internet Speeds]

According to a recent report produced by the Center for Strategic and International Studies (CSIS), a think tank based in Washington, 2018 was an active year for cyberattacks, with more than 100 significant incidents occurring in the past year. Looking at publicly available data on cyber-espionage and warfare but excluding cybercrime, the CSIS study reveals that China and Russia have been the largest source of attacks in cyberspace since 2006. In December of 2018 alone, four major incidents were reported involving China, while three involved Russia.

From 2006 to 2018, China was involved in 108 cyber incidents with losses of more than $1 million each, compromising communications across Europe, conducting cyber-espionage spying on 12 countries and stealing information from hundreds of millions of customers of a U.S. hotel chain, according to the CSIS report. Another study labeled China as the biggest state sponsor of cyberattacks on the West.

[MORE: China Expands Its Surveillance Model]

Russia has been responsible for 98 major cyber incidents since 2006 with losses of more than $1 million each, the CSIS report said, and is accused of hacking Ukraine’s government, NATO operations, the Czech security service and the German Parliament.

The CSIS report examined data on China, North Korea, Iran, India, Russia, the United Kingdom, the United States, Germany, Australia, Japan, South Korea, Ukraine, Israel and France, with the rest of the world listed as a separate category. The study named the rest of the world as the third-worst offender, with 67 incidents. Next in the ranking came Iran with 44 incidents, and North Korea with 38. India was listed as guilty of 16 important cyber incidents from 2006 to 2018, while the U.S. was accused of nine.

Just two countries were identified as having not been the source of cyberattacks in the past 12 years: Japan and Australia.

“Cyberattacks are a global phenomena and it’s only growing,” says Kurt Baumgartner, principal security researcher in the Global Research and Analysis Team at Kaspersky Lab. “There are hot spots in the world that both source cyber activity and attract that activity, and (this) is only growing to the point that more and more nations are budgeting offensive cybersecurity operations.”

[MORE: China Annually Fakes Millions of Social Media Posts]

The CSIS report found the “rest of world” category was the victim of no fewer than 165 incidents from 2006 to 2018, while U.S. government agencies, defense and tech companies, and other entities were the target of 117 cyberattacks with losses of more than $1 million each. There have been 35 major cyber incidents targeting India and 34 targeting South Korea.

China was attacked 25 times in major cyber incidents from 2006 to 2018, according to the report, including one involving an Indian group hacking Chinese government agencies and research institutions.

The United Kingdom also reported 25 important cyberattacks, including one reported in May 2018 that had targeted its electric utility networks since 2017. In Israel, 24 important cyberattacks have occured since 2006, while Ukraine saw 23. Russia was the victim 16 major cyberattacks in the past 12 years, the report said, with that figure including an attack by a state-sponsored Middle Eastern hacking group that targeted a Russian oil company with operations in Pakistan, Russia, Saudi Arabia, Turkey and North America.

[MORE: Chileans Most Worried About Internet Privacy]

Experts warn that regardless of the type, cyberattacks come at a great cost economically and in public regard. Organizations that expose users to such attacks are more likely to lose their customer’s trust, while cyber crimes may also deter those interested in investing in new technologies.

“Over the past decade we’ve seen all sort of cybersecurity challenges and issues and they range anywhere from massive financial crime, sometimes performed on behalf of groups that are known to be sponsored and associated with state-owned groups, to events that affect people’s daily lives,” says Baumgartner. “It’s a huge problem when money is just flushing around because of cybersecurity issues.”

More from U.S. News

China Expands Its Surveillance Model By Training Other Governments

China Fakes Nearly 450 Million Social Media Posts Annually, Research Shows

Countries’ Actions on Internet Spark Growing Privacy Worries

China and Russia Biggest Cyber Offenders Since 2006, Report Shows originally appeared on usnews.com

Federal News Network Logo
Log in to your WTOP account for notifications and alerts customized for you.

Sign up