China Suspected of Breaching Part of FBI's Surveillance Network

Digital Collection System Network

DSCNet, short for Digital Collection System Network, is the FBI’s internal network and software suite used for real-time communication surveillance of telephones, microphones, fax lines, text messages, along with location data from cellular towers. The system runs on Windows-based computers and can interface directly with the networks of cellular providers, allowing real-time surveillance. There are multiple versions of this system with a range of capabilities.

Initial Sources

The FBI recently disclosed this breach to Congress, describing it as a serious cybersecurity threat. The White House is reportedly assisting the FBI, along with the NSA, in investigating and handling the matter. The breached system contains critical information related to targets of law enforcement operations and surveillance activities against them. The FBI reportedly first detected the suspicious activity on February 17th.

Lack of Information

Not much has been disclosed by the FBI, and given the nature of the agency, it is possible that further details may never be released. In a statement to CNN, the FBI stated:

“The FBI identified and addressed suspicious activities on FBI networks, and we have leveraged all technical capabilities to respond.”

It is unknown who the threat actor was or what attack vector was used. For what we know it could be a brazen cybercriminal group or a more serious state-sponsored actor. All that was confirmed is that the FBI discovered the abnormal activity and claims to have mitigated it. Investigations into the matter are ongoing.

Investigators Suspect China

A day after the incident was made public, The Wall Street Journal published a report suggesting that investigators believe China was behind the attack. The FBI declined to comment on the claims, and the Chinese Embassy in Washington has not responded.