Previous All Posts Next

Chinese Spy Chips Found on US Servers

Posted: October 5, 2018 to Cybersecurity.

Tags: Data Breach, Malware, Cloud Security

This is something I've been contemplating for a good 20 years. I hate to see my suspicions borne out. As it turns out, China has been putting rice-sized surveillance chips on motherboards manufactured in the country. Since the chips are so small they don't contain a lot of information, but it's enough to allow Chinese hackers to create secret connections to networks that can send and receive information and alter the systems the chip is attached to. The list of companies and institutions affected by the espionage is extensive and includes Amazon, Apple, a major bank, intelligence agencies, and the military. It was almost a stroke of luck that these microchips were even discovered. Three years ago, Amazon was considering buying Elemental Technologies, a company that compresses videos for streaming for things like intelligence agency drones to Space Station communications. During the due diligence, Amazon was inspecting motherboards used by Elemental. The motherboards were built by a company based in San Jose called Supermicro. It's during this inspection that the spy chip was discovered. Amazon then reported the chip to authorities, who started a years-long secret probe that determined the chips had been inserted during their manufacturing in China, though China's Ministry of Foreign Affairs has denied involvement.
Craig Petronella
Craig Petronella
CEO & Founder, Petronella Technology Group | CMMC Registered Practitioner

Craig Petronella is a cybersecurity expert with over 24 years of experience protecting businesses from cyber threats. As founder of Petronella Technology Group, he has helped over 2,500 organizations strengthen their security posture, achieve compliance, and respond to incidents.

Related Service
Protect Your Business with Our Cybersecurity Services

Our proprietary 39-layer ZeroHack cybersecurity stack defends your organization 24/7.

Explore Cybersecurity Services
Previous All Posts Next