iPhone app iPad app Android phone app Android tablet app More

Gerry Smith
GET UPDATES FROM Gerry:

Nortel Breach Raises Security Concerns For Telecom Industry

Posted: 02/14/12 07:00 PM ET  |  Updated: 02/15/12 08:00 AM ET

Nortel Breach

The long-term penetration of Nortel Networks' computer system by hackers raises the possibility that owners of the company's telecom equipment could face cybersecurity concerns of their own, some experts say.

Hackers, possibly from China, spied on Nortel Networks for nearly a decade, according to report Tuesday in the Wall Street Journal. The hackers had access to Nortel's business plans, reports, emails and other documents by stealing passwords from top company executives and installing spyware they controlled remotely, according to the paper.

Though it filed for bankruptcy three years ago, Nortel was once one of the world's largest providers of telecom equipment. Nortel's gear is still used to route phone calls and Internet traffic by major telecom providers, government agencies, hospitals and banks using private networks, according to Akshay Sharma, an analyst at the research firm Gartner Inc.

Experts say it is difficult to determine the motive behind the breach or what information was stolen. But Sharma said organizations using older versions of Nortel equipment could encounter security risks.

"This is a wakeup call," Sharma said.

According to the Journal, Nortel did not disclose or fix the security problem before selling off its assets to buyers, including Ericsson, Avaya Inc., Genband and Ciana.

A spokesperson for Nortel did not return a request for comment.

James Lewis, director of the Center for Strategic and International Studies' Technology and Public Policy program, said the hackers could use what they learned from spying on Nortel to gain future access to the nation's telecommunications grid.

"If you knew how the Nortel stuff worked, that would let you gain access to the telecommunications network when you needed to," Lewis said.

Tom Kellermann, a member of the Commission on Cybersecurity for the 44th Presidency, said the breach of Nortel could give hackers "a persistent presence in the telecommunications network."

But a former federal government official said Nortel has known about the spying "for quite some time" and has been quietly working with major network service providers to secure its systems from hackers.

The former official added that the bigger concern about the Nortel hack was the theft of intellectual property. The stolen information, possibly including valuable research and development plans, would likely be given to Chinese telecom companies, the former official said.

One such company, Huawei, has been blocked from entering the U.S. telecom market, partly out of concern that the company could spy on communications on behalf of the Chinese government because the company's chief executive formerly worked for the Chinese military's telecom research department.

The breach of Nortel will likely reinforce U.S. intelligence concerns about hackers from China stealing American military, technology and economic secrets. "Chinese actors are the world's most active and persistent perpetrators of economic espionage," according to a report last fall by U.S. intelligence officials.

China has dismissed accusations it sponsors hacking to steal U.S. secrets, calling them "irresponsible."

FOLLOW HUFFPOST TECH

The long-term penetration of Nortel Networks' computer system by hackers raises the possibility that owners of the company's telecom equipment could face cybersecurity concerns of their own, some expe...
The long-term penetration of Nortel Networks' computer system by hackers raises the possibility that owners of the company's telecom equipment could face cybersecurity concerns of their own, some expe...
 
 
  • Comments
  • 53
  • Pending Comments
  • 0
  • View FAQ
Post Comment Preview Comment
To reply to a Comment: Click "Reply" at the bottom of the comment; after being approved your comment will appear directly underneath the comment you replied to.
View All
Favorites
Recency  | 
Popularity
10:21 AM on 02/15/2012
This main story here is not hacking or vulnerabilities, but the economic implications. China is hacking US companies for good reason. After stealing the information they will then develop thier own technology devices, and flood the market with cheaper alternatives, thus driving US companies out of business and hurting our economy. We face not only oil and terror threats in the world, but our innovations secrets as well. Remember at one time there were American made televisions?
11:12 AM on 02/15/2012
The US still makes "technology devices"?
11:14 AM on 02/15/2012
You know what I mean Mr China, an American company. even though all the components for that device might be made elsewhere.
photo
HUFFPOST SUPER USER
PeterNPaul
Hey NSA. I hope you are listening.
04:48 AM on 02/15/2012
Huawei is hardly shut out of the US telecom market.

On Oct. 1, 2010, Huawei opened a new headquarters in Plano, Texas. Gov. Rick Perry appeared at the ribbon-cutting ceremony and praised the company’s “strong, worldwide reputation as an innovator of quality telecommunications technology”

Huawei’s U.S. sales for 2011 will exceed $1 billion and they employ more than 1,500 in the United States.

Their bid to buy 3Com was with Bain Capital.

They include Dick Gephardt and a former World Bank president as a lobbyists.
http://voices.washingtonpost.com/posttech/2010/09/amerilink_telecom_said_tuesday.html

While they have been shut out of the big deals, they continue to make inroads at cash strapped small operators with equipment that is typically about 40% less than the competition.

They have a huge presence in Canada with all the major operators. Nortel was formerly a great Canadian company.
photo
HUFFPOST SUPER USER
kurtvb
Knowledge is Power
07:52 AM on 02/15/2012
How can a foreign company come to the US, make similar equipment and charge 40% less, unless they are backed a government flush with cash willing to take a loss until they dominate a market. It seems to me that the FTC should be investigating their business practices.
This user has chosen to opt out of the Badges program
photo
loco48
TRUTH trumps ideology!
09:47 AM on 02/15/2012
Most electronic equipment including telephone is manufactured overseas with cheap labor. These foriegn companies here are just marketing companies and most products (not all) are made in their home countries and shipped here.
photo
HUFFPOST SUPER USER
PeterNPaul
Hey NSA. I hope you are listening.
03:55 PM on 02/15/2012
Well first they manipulate their currency and are funded in part (so some say) by the Chinese government. Might also want to check this link that just crossed my desk today. The two largest wireless carriers in Canada now are using them: http://www.4gtrends.com/articles/90559/getting-closer-huawei-scores-4g-deals-in-canada/
photo
HUFFPOST SUPER USER
Donald J Sullivan
Monetary Reform Now
04:07 AM on 02/15/2012
Research Amdocs, Inc. This just gets worse if you do this has been going on for years and years.
This user has chosen to opt out of the Badges program
photo
loco48
TRUTH trumps ideology!
03:39 AM on 02/15/2012
This article is bunk. The chinese have manufacturing plants in China that build Siemens and Lucent telcom switching systems in joint ventures with these companies. Nortel is a floundering corporation now. There is nothing about our switching systems and telecommunication backbone that the chinese do not already know. Just a scare article to make people fear the chinese. Fear. I was a system engineer on the systems for 30 years and Nortel has nothing classified or secret.
photo
dennis1943
whatever the voices in my head say.......
09:33 AM on 02/15/2012
There is no telling what kind of back doors were put into the code that was shipped with the hardware.............
This user has chosen to opt out of the Badges program
photo
loco48
TRUTH trumps ideology!
09:42 AM on 02/15/2012
As a former system engineer who developed software for switching systems I can gaurantee there is no secret door in the code. If the customer (ATT, Verizon) found out that we did that they would not buy another line from us. And they would find out. There is ports for the customer or the manufacturer (x25) to enter the telephone network to make changes, troubleshoot problems and perform maintenance. The customer control these maintenance ports and can shut off the outside world including the manufacturer. But as all software systems with access points, they can be hacked. They do have hacker protection built in, but not 100% foolproof.
photo
StopThePlanet
Outlaw stupidity and only outlaws will be stupid
03:27 AM on 02/15/2012
The former official added that the bigger concern about the Nortel hack was the theft of intellectual property. The stolen information, possibly including valuable research and development plans, would likely be given to Chinese telecom companies, the former official said.
Information about how to make hackable telecom equipment is valuable intellectual property?
02:58 AM on 02/15/2012
The 'news' in this article is that 'Nortel' is still 1) in existence, and 2) relevant enough to write a story about!
08:01 AM on 02/15/2012
Don't forget 3), that some telecom and government offices have been too cheap to upgrade this whole time.
photo
HUFFPOST SUPER USER
Stephen Thorpe
Every breath you take - I'll take one too!
02:51 AM on 02/15/2012
We Americans invited Chinese students to our schools and we taught them all sorts of technology. Then our 'capitalist leaders' (mostly Republicans) happily sent the manufacturing to China.
Along with so much more of our best cutting edge technology.
Lets hope those executives are enjoying their nice fat cushy retirements.
photo
HUFFPOST SUPER USER
Ken Maddox
This time abolish the GOP WealthCare programs!
01:56 AM on 02/15/2012
The DMS 100/200 family of telephone switches are still one of the best ever devised. They measure up well, or did back ten years ago when I was still working on them, with anything from Seimens, AT&T, or Ericsson. I can only assume that their products are still switching voice and data communications today.
02:28 AM on 02/15/2012
Well they are still out there, but slowly they are being turned down as the residential POTS line drop off.

But Nortel being hacked, for what? For technology, I doubt there is anything that worth while.
This user has chosen to opt out of the Badges program
photo
loco48
TRUTH trumps ideology!
03:33 AM on 02/15/2012
The DMS 100 was a good switch. But siemens had 120K ports with the EWSD and Lucent the same with the 5ESS. The DMS 200 did not have that capacity.
photo
HUFFPOST SUPER USER
Ken Maddox
This time abolish the GOP WealthCare programs!
10:28 AM on 02/15/2012
True, true, I have worked on them all, plus the Ericsson AXE (a strange and rather awkward thing to work on).
photo
BigBearcatBill
This is the real Bearcat - a Binturong
01:44 AM on 02/15/2012
I think hackers like all white collar crimes should get more serious sentences when convicted, real serious so it sends a message.
03:41 AM on 02/15/2012
They're superstars in China . . The Chinese do espionage right . .
12:23 AM on 02/15/2012
I'm just curious - firewalls, intrusion prevention, application control all of these does not apply on Nortel? WTF are they thinking? There is no one who could identify data leaks and block all IP subnets that belong to China? How about hiring forensic security company and identify the risks and will pinpoint the source of the attack?
No wonder Nortel failed. Either idiotic mismanagement or stupidity of their IT staff.
08:03 AM on 02/15/2012
Nortel isn't neccessarily the problem. They have been selling routers for years. The problem is that companies in the US are still using those same old routers from years ago, instead of refreshing their hardware. The times have changed but US infrastructure companies have not met that change.
photo
HUFFPOST SUPER USER
RealityMyFriend
12:10 AM on 02/15/2012
Everyone needs to understand a couple things. Nothing is 100% secure. All we can do is just hope you don't get hacked or your perosnal infomration gets stollen. Can happen to anyone! Just watch out and tred lightly.
professor
Correkt the Spelling and Pick on the Moniker
10:54 PM on 02/14/2012
To intelligent men and women, the world is an infinite mystery.
Dumb people got an answer for everything.

No, you are dumb.
11:41 PM on 02/14/2012
Lol, I didn't read the article and just scrolled down to the comments, but I absolutely love this. I do not know what the comment's context is, but it doesn't matter, this is great.

Thank you for this,
Virulancer
professor
Correkt the Spelling and Pick on the Moniker
09:27 PM on 02/14/2012
I am kind of hoping eventually the whole internet gets shut down. It is the time-waster of all time. It is useless when not detrimental. It turns us all into robots. And it helps them keep tabs on us.
photo
Pectin
Lie to me...
10:41 PM on 02/14/2012
That's the dumbest thing I've read all day.

Pull your own plug, if you can't control yourself.
photo
HUFFPOST SUPER USER
RealityMyFriend
12:11 AM on 02/15/2012
Amen.
08:05 AM on 02/15/2012
Between this one and his post above he takes the dumb post # 1 and #2 award.
photo
HUFFPOST SUPER USER
Ken Maddox
This time abolish the GOP WealthCare programs!
01:57 AM on 02/15/2012
Beep,,beep, beep!
Genders
Love, Tolerance, Enlightenment
09:07 PM on 02/14/2012
Did you know that industrial espionage existed BEFORE computers?

There is no such thing as perfect security where people are involved.

but there is good security.

I have no idea what Nortel's case was. did they have good security? or were they sloppy.
02:29 AM on 02/15/2012
I would vote those left really do not care. The company is a shell of it's former self.
This user has chosen to opt out of the Badges program
photo
blade1
can't we all just get along? - RK
02:47 AM on 02/15/2012
toward the end they really didn't care...