New Zealand Joins US, UK Announce Sanctions Against Hackers

Hackers linked to the Chinese government launched a state-sponsored operation that targeted New Zealand’s Parliament in 2021, the country’s security minister said Tuesday.
New Zealand’s allegation comes a day after American and British authorities announced a set of criminal charges and sanctions against seven hackers, all believed to be living in China, who targeted US officials, journalists, corporations and pro-democracy activists, as well as the UK’s election watchdog.
“The use of cyber-enabled espionage operations to interfere with democratic institutions and processes anywhere is unacceptable,” Judith Collins, the defense minister responsible for the Government Communications Security Bureau, said in a statement.
Collins said the agency had also established links between a state-sponsored entity linked to China and malicious cyber activity targeting parliamentary entities in New Zealand.
The bureau’s National Cyber Security Centre “completed a robust technical assessment” following a compromise of the Parliamentary Counsel Office and the Parliamentary Service in 2021, and has attributed this activity to a PRC (China) state-sponsored group known as APT40,” Collins said.
“Fortunately, in this instance, the NCSC worked with the impacted organizations to contain the activity and remove the actor shortly after they were able to access the network,” she added.
Collins said New Zealand will not follow the US and UK in sanctioning China because New Zealand does not have a law allowing such penalties, nor were there plans to introduce legislation.
Foreign Minister Winston Peters confirmed New Zealand’s concerns had been conveyed to Chinese Ambassador Wang Xiaolong.