Threat Watch

Allegations of Malicious Chinese Hardware May Be Exaggerated

Reports which were released last week of Chinese micro-chips being installed on Supermicro motherboards may not be accurate.  Several of the organizations who were named as being affected by the devices have come out and publicly claimed that there is no validity to the report.  The report was originated by Bloomberg and cited unnamed officials at various companies as well as unnamed government sources.  While denials by the Chinese government of any involvement in the reported actions is not surprising by any means, the fact that so many large companies like Apple have denied the allegations and the Department of Homeland Security has backed up those claims and has said that it has “no reason” to doubt the various companies who have confirmed that their equipment was not affected in a Chinese hacking campaign.  This raises a number of questions about where Bloomberg obtained their information and who would have provided this information to Bloomberg.

ANALYST NOTES