Dutch intelligence agencies announced in a rare report published today, Tuesday, that state-sponsored Chinese hackers breached an internal computer network within the Dutch Ministry of Defense last year. The agencies, known by their abbreviations AIVD and MIVD, stated that the hackers deployed sophisticated malware that conceals its activity within the ministry's network. In a joint statement, the agencies said, "China uses this type of malware to spy on computer networks. The malware was specifically developed for Fortinet devices that organizations use as firewalls on their systems. The manufacturer Fortinet supplies this product worldwide."
This is the first time the Netherlands has publicly linked China to cyber espionage activities amid increasing national security tensions between Beijing and The Hague. The Chinese embassy in the Netherlands did not immediately respond to a request for comment. Beijing routinely denies allegations of cyber espionage and claims to oppose all forms of cyber attacks. A spokesperson for Fortinet has yet to respond to a request for comment.
In April, AIVD stated in an annual assessment that China poses the greatest threat to the economic security of the Netherlands, with ongoing espionage attempts targeting advanced technology companies and universities. The primary target is ASML, a semiconductor production machinery company based in Veldhoven, South Holland, which is the world's dominant supplier of machines used in computer chip manufacturing.
In a separate report also released in April, MIVD noted that China is unlawfully attempting to acquire Dutch space technology, including by circumventing export restrictions.