FBI announces cyber strategy as Treasury 'cracks down' on China-linked criminals

On Wednesday, the FBI unveiled a comprehensive cyber strategy aimed at combating hackers and cyber threats both domestically and internationally. Assistant Director Brett Leatherman unveiled the strategy at the Billington Cyber Security Summit in Washington. The report not only provides cyber security guidelines for individuals, organizations, and businesses within the US, but also sends a message to adversaries about the FBI's efforts to counter them in cyberspace.

The strategy outlines five key pillars: dismantling digital tools and infrastructure used by adversaries, supporting victims of cyber crimes, collaborating with the private sector on cyber strategy planning, enhancing the FBI's cyber talent, and educating staff on safe artificial intelligence usage.

The FBI's cyber section highlights state-sponsored cyber threats from China, Russia, Iran, and North Korea. However, Assistant Director Leatherman emphasized China as the most significant threat, stating, "There is no threat right now that poses a more significant risk to national security than the People's Republic of China." The US Treasury's Office of Foreign Assets Control (OFAC) recently issued sanctions against Xinbi Guarantee, a Chinese-language platform extensively used by Chinese cyber criminals.

OFAC described Xinbi Guarantee as a central node connecting transnational criminal syndicates involved in cyber scams, fraud, money laundering, and other criminal activities targeting Americans. Xinbi Guarantee serves as a vital connection between these criminal networks and merchants providing financial services, technology, and other goods to support their illicit operations.

China has consistently denied accusations of state-sponsored cyber crimes and hacking, with the Chinese embassy in Washington declining to comment on the matter.

Meanwhile, the FBI continues to address cyber threats linked to Iran, with Jason Bilnoski, deputy assistant director of the FBI's cyber operations branch, speaking about the bureau's efforts to combat cyber crime amid recent hacks affecting US water systems. While Bilnoski did not specifically mention Iran, he emphasized the bureau's collaboration with private sector partners and allies in combating cyber criminals, botnets, and malware.

The bureau's approach has been strengthened since the US and Israel attacked Iran at the end of February, as hacking attempts against the US have escalated significantly. In March, the Iranian-backed cyber group Handala took credit for hacking the personal email and cloud services of FBI Director Kash Patel, as well as a cyber attack against Michigan-based medical technology company Stryker, which employs over 50,000 people globally.

One particular hack by Handala, involving the breach of California Water Service systems, highlighted their restraint by publishing five gigabytes of data from the breach while avoiding a complete shutdown of the water supply.