The National Security Agency has implanted software in nearly 100,000 computers around the world — but not in the United States — that allows the U.S. to conduct surveillance on those machines, The New York Times reported Tuesday.
The Times cited NSA documents, computer experts and U.S. officials in its report about the use of secret technology using radio waves to gain access to computers that other countries have tried to protect from spying or cyberattacks. The software network could also create a digital highway for launching cyberattacks, the Times reported.
The Times reported that the technology, used by the agency for several years, relies on radio waves that can be transmitted from tiny circuit boards and USB cards inserted covertly into the computers. The NSA calls the effort an "active defense" and has used the technology to monitor units of China's army, the Russian military, drug cartels, trade institutions inside the European Union, and sometime U.S. partners against terrorism like Saudi Arabia, India and Pakistan, the Times reported.
Among the most frequent targets of the NSA and U.S. Cyber Command, the Times reported, has been China's army. The United States has accused China's army of launching regular attacks on American industrial and military targets, often to steal secrets or intellectual property. When Chinese attackers have placed similar software on computer systems of American companies or government agencies, American officials have protested, the newspaper reported.
The NSA says the technology has not been used in computers in the U.S.
"NSA's activities are focused and specifically deployed against — and only against — valid foreign intelligence targets in response to intelligence requirements," Vanee Vines, an agency spokeswoman, said in a statement to the Times. "We do not use foreign intelligence capabilities to steal the trade secrets of foreign companies on behalf of — or give intelligence we collect to — U.S. companies to enhance their international competitiveness or increase their bottom line."
Parts of the program have been disclosed in documents leaked by Edward Snowden, the former NSA systems analyst, the Times reported. A Dutch newspaper published the map showing where the United States has inserted spy software, sometimes with the help of local authorities. Der Spiegel, a German newsmagazine, published information about the NSA's hardware products that can secretly transmit and receive signals from computers, according to the Times.
The Times said that it withheld some of those details, at the request of U.S. intelligence officials, when it reported in summer 2012 on American cyberattacks on Iran.
China's ministries of Defense and Foreign Affairs did not immediately respond to faxed queries from The Associated Press seeking comment on the article. Chinese officials in the past have stressed that China is a victim of international cyber-espionage and have pushed for international coordination on controlling such espionage.
Zhu Feng, an international security expert at Peking University, said: "Those spying activities show that the U.S. says one thing while doing another thing, and the spying activities are being conducted in an irregular way without rules. Other countries may follow suit, leading to a fierce arms race on the Internet. So, it is time to set up rules and regulations in cyberspace with coordination from the international community."
The Associated Press