The agency’s findings Checkpoint Investigation (CPR). This entity observed an abnormal increase, around 116%of cyber attacks against NATO member countriesthese attacks come from Chinese IP addresses.
The current period of armed conflict between Russia and Ukraine has consequences for the most diverse sectors of activity, including the one that is already cataloged as the new war front, cybernetics. Therefore, it is concerning that CPR is reporting an increase in cyberattacks originating from China-based IP addresses.
116% increase in cyberattacks on NATO countries from China
The conclusions have already been presented after the analysis of the documents posted online by the agency in question. More specifically, in the last week the CPR has observed an abnormal increase in cyberattacks against NATO member countries, these attacks originating from Chinese IP addresses.
This entity monitored the trend before and after Russia’s invasion of Ukraine. Therefore, realizing that cyber attacks from Chinese IPs increased by 116% against NATO countries, and 72% against the rest of the world.
The attacks are not attributed to Chinese officials
However, CPR cannot attribute these attacks to Chinese entities or other Chinese threat actors. However, this finding indicates a trend that hackers, likely in China and abroad, are increasing the use of Chinese IPs as a resource base to launch cyber attacks after the start of the Russia-Ukraine conflict.
Synthesize:
- CPR has seen an increase in cyberattacks coming from Chinese IP addresses due to the ongoing conflict between Russia and Ukraine.
- Last week, the average number of global attacks per organization coming from China was 72% higher than in the pre-invasion period and 60% higher than in the first three weeks of the conflict.
- Last week, China’s average number of attacks on corporate networks in NATO countries was 116% higher than before the invasion, and 86% higher in the first three weeks of the conflict.
- The increase is significantly higher than the global increase in cyberattacks observed during the same time periods.