U.S. House of Representatives Passes Bill to Ban TikTok Unless Divested from ByteDance

Yesterday, with broad bipartisan support, the U.S. House of Representatives voted overwhelmingly (352-65) to support the Protecting Americans from Foreign Adversary Controlled Applications Act, designed to begin the process of banning TikTok’s use in the United States. This is music to my ears. See a previous blog post on this subject.

The Act would penalize app stores and web hosting services that host TikTok while it is owned by Chinese-based ByteDance. However, if the app is divested from ByteDance, the Act will allow use of TikTok in the U.S.

National security experts have warned legislators and the public about downloading and using TikTok as a national security threat. This threat manifests because the owner of ByteDance is required by Chinese law to share users’ data with the Chinese Communist government. When downloading the app, TikTok obtains access to users’ microphones, cameras, and location services, which is essentially spyware on over 170 million Americans’ every move, (dance or not).

Lawmakers are concerned about the detailed sharing of Americans’ data with one of its top adversaries and the ability of TikTok’s algorithms to influence and launch disinformation campaigns against the American people. The Act will make its way through the Senate, and if passed, President Biden has indicated that he will sign it. This is a big win for privacy and national security.

Copyright © 2024 Robinson & Cole LLP. All rights reserved.
by: Linn F. Freedman of Robinson & Cole LLP

For more news on Social Media Legislation, visit the NLR Communications, Media & Internet section.

Huawei U.S. Patent Grants Drop 24% in 2023; BOE Drops Out of the Top 10

Accordingly to analysis by Harrity Patent AnalyticsHuawei ranked 10th for US patent grants in 2023, down 3 spots from 2022 with a 24% drop in patent grants. BOE Technology Group Co., Ltd. dropped even further to 19th down from 8th in 2022. BOE had a 38% drop in granted US patents. Tencent was 54th this year with an 11% drop in patent grants. Oppo was down 32%. Baidu was up only 1%. Xiaomi was down 7% and didn’t make the top 100 in 2023. Alibaba was down 49%. In contrast, US companies advanced with Qualcomm patent grants up 46%, Alphabet (Google) up 23% and Apple up 11%.

The drop in Chinese patent grants reverse the trend of growing US patent grants for Chinese companies. Huawei’s patents grants in 2022 were up 3%, BOE up 27%, Baidu up 43% and Xiaomi up 33%.

Possible reasons for the drop in grants to Chinese entities may include a poorly performing Chinese economy, the reduction and elimination of government subsidies for foreign patent grants, the impact of COVID-19 on patent application filings the past few years; and geopolitical tensions.

Top 10 Chinese Grantees of U.S. Patents in 2023

Rank Company 2023 Patents % Change from 2022
10 HUAWEI TECHNOLOGIES CO., LTD. 2290 -24%
19 BOE TECHNOLOGY GROUP CO., LTD 1695 -38%
54 TENCENT HOLDINGS LTD 702 -11%
67 BAIDU, INC. 626 +1%
77 LENOVO GROUP LIMITED 530 -16%
84 OPPO MOBILE TELECOMMUNICATIONS CORPORATION 516 -32%
101 XIAOMI INC. 461 -7%
115 TSINGHUA HOLDINGS 372 -3%
121 ZTE CORPORATION 351 -14%
122 BYTEDANCE LTD. 350 +119%

Source: https://harrityllp.com/patent300/

University of Texas at Austin Permanently Blocks TikTok on Network

On Tuesday, January 17, 2023, the University of Texas at Austin announced that it has blocked TikTok access across the university’s networks. According to the announcement to its users, “You are no longer able to access TikTok on any device if you are connected to the university via its wired or WIFI networks.” The measure was in response to Governor Greg Abbott’s December 7, 2022, directive to all state agencies to eliminate TikTok from state networks. Following the directive, the University removed TikTok from university-issued devices, including cell phones, laptops and work stations.

Copyright © 2023 Robinson & Cole LLP. All rights reserved.

For  more Cybersecurity Legal News, click here to visit the National Law Review.

Nineteen States Have Banned TikTok on Government-Issued Devices

Governors of numerous states have issued Executive Orders in the past several weeks banning TikTok from government-issued devices and many have already implemented a ban, with others considering similar measures. There is also bi-partisan support of a ban in the Senate, which unanimously approved a bill last week that would ban the app from devices issued by federal agencies. There is already a ban prohibiting military personnel from downloading the app on government-issued devices.

The bans are in response to the national security concerns that TikTok poses to U.S. citizens [View related posts].

To date, 19 states have issued some sort of ban on the use of TikTok on government-issued devices, including some Executive Orders banning the use of TikTok statewide on all government-issued devices. Other state officials have implemented a ban within an individual state department, such as the Louisiana Secretary of State’s Office. In 2020, Nebraska was the first state to issue a ban. Other states that have banned TikTok use in some way are: South Dakota, North Dakota, Maryland, South Carolina, Texas, New Hampshire, Utah, Louisiana, West Virginia, Georgia, Oklahoma, Idaho, Iowa, Tennessee, Alabama, Virginia, and Montana.

Indiana’s Attorney General filed suit against TikTok alleging that the app collects and uses individuals’ sensitive and personal information, but deceives consumers into believing that the information is secure. We anticipate that both the federal government and additional state governments will continue to assess the risk and issue bans on its use in the next few weeks.

Copyright © 2022 Robinson & Cole LLP. All rights reserved.
For more Cybersecurity Legal News, click here to visit the National Law Review.

USTR Seeks Comments on Section 301 Tariffs on Chinese Goods; Portal Opens Nov. 15

The Office of the U.S. Trade Representative (USTR) announced Oct. 17 that starting Nov. 15, it will begin soliciting comments on the effectiveness of Section 301 tariffs the Trump administration placed on Chinese goods. The notice and request for comments relate to USTR’s ongoing four-year statutory review of the Section 301 investigation of China’s Acts, Policies, and Practices Related to Technology Transfer, Intellectual Property, and Innovation.

In the Federal Registrar Notice, USTR said it is seeking “public comments on the effectiveness of the actions in achieving the objectives of the investigation, other actions that could be taken, and the effects of such actions on the United States economy, including consumers.”

The USTR is specifically interested in comments on the following:

  • The effectiveness of the actions in obtaining the elimination of China’s acts, policies, and practices related to technology transfer, intellectual property, and innovation.
  • The effectiveness of the actions in counteracting China’s acts, policies, and practices related to technology transfer, intellectual property, and innovation.
  • Other actions or modifications that would be more effective in obtaining the elimination of or in counteracting China’s acts, policies, and practices related to technology transfer, intellectual property, and innovation.
  • The effects of the actions on the U.S. economy, including on U.S. consumers.
  • The effects of the actions on domestic manufacturing, including in terms of capital investments, domestic capacity and production levels, industry concentrations, and profits.
  • The effects of the actions on U.S. technology, including in terms of U.S. technological leadership and U.S. technological development.
  • The effects of the actions on U.S. workers, including with respect to employment and wages.
  • The effects of the actions on U.S. small businesses.
  • The effects of the actions on U.S. supply chain resilience.
  • The effects of the actions on the goals of U.S. critical supply chains.
  • Whether the actions have resulted in higher additional duties on inputs used for additional manufacturing in the United States than the additional duties on particular downstream product(s) or finished good(s) incorporating those inputs.

The continuing assessment of these additional duties has been criticized by some business groups and lawmakers who believe they have hurt both U.S. businesses and U.S. consumers but have not checked China’s behavior. They also have called for the reinstatement of previously issued exclusions and for a new, robust tariff exclusion process. Some labor and civil society groups, however, want the tariffs to remain in place. The fate of these tariffs is closely tied to the Biden administration’s ongoing review and the overall U.S.–China trade relationship. The controversial tariff program that covers upwards of $300 billion worth of imports from China has sparked lawsuits from more than 3,500 importers.

The comment period begins on Nov. 15 and extends until Jan. 17. USTR said it will post specific questions on its website Nov. 1 before the portal opens.

©2022 Greenberg Traurig, LLP. All rights reserved.

Supreme People’s Court Upholds China’s First Patent Linkage Ruling – Decision Released

On August 28, 2022, 知识产权那点事 published the first patent linkage decision from the Supreme People’s Court (SPC). The SPC upheld the Beijing IP Court ruling that Wenzhou Haihe Pharmaceutical Co., Ltd.’s application for marketing authorization for a generic form of “Aidecalcidol Soft Capsule” did not fall within scope of protection of the relevant patent. China’s patent linkage system prevents marketing authorization for a generic prior to the expiration of the patent term on the branded equivalent unless the Beijing IP Court or the China National Intellectual Property Administration (CNIPA) rules that the generic does not fall within the scope of the relevant patent rights or is invalid.

On November 10, 2021, the Beijing IP Court announced that the plaintiff of the case, Chugai Pharmaceutical Co., Ltd., a subsidiary of Roche, claimed that it was the patentee as well as the holder of the marketing license for the patented drug “Aidecalcidol Soft Capsule”, and the patent involved in the drug was CN 2005800098777.6 entitled “ED-71 preparation.” The plaintiff discovered that the defendant Wenzhou Haihe Pharmaceutical Co., Ltd. had applied to the National Medical Products Administration (NMPA) for a generic drug marketing license application named “Aidecalcidol Soft Capsule”. The public information on the Chinese listed drug patent information registration platform showed that the defendant had made a 4.2 category statement regarding the generic drug (the generic drugs do not fall into the scope of protection of the related patents). Therefore, the plaintiff filed a drug patent linkage lawsuit with the Beijing Intellectual Property Court in accordance with the provisions of Article 76 of the Amended Patent Law, requesting the court to confirm that the generic drug “Aidecalcidol Soft Capsule” that the defendant applied for registration fell into the scope the rights of Patent No. 2005800098777.6 enjoyed by the plaintiff.

 

The Beijing IP Court held:

The technical solution used by the generic drug involved is neither the same nor equivalent to the technical solution of claim 1 of the involved patent, so the technical solution does not fall within the protection scope of claim 1 of the involved patent. Since claims 2-6 are dependent claims of claim 1, if the technical solution of the generic drug involved does not fall within the protection scope of claim 1, it also does not fall within the protection scope of claims 2-6. Accordingly, the plaintiff’s claim that the involved generic drug falls within the protection scope of claims 1-6 of the involved patent cannot be established, and the court will not support it.

In the decision, the Supreme People’s Court stated there were two key points:

1. In the process of drug marketing review and approval, disputes arising from the patent rights related to the drug to be registered between the drug marketing license applicant and the relevant patentee or interested parties are only one type of the related patent rights between the two parties – often referred to as drug patent link disputes. For chemical generic drugs, the drug regulatory department of the State Council conducts drug marketing review and approval based on the application materials of the generic drug applicant, and decides whether to suspend the approval of the relevant drugs according to the effective judgment made by the people’s court [or the China National Intellectual Property Administration] on such disputes within the prescribed time limit. Therefore, when judging whether the technical solution of a generic drug falls within the scope of patent protection, in principle, it should be compared and judged on the basis of the application materials of the generic drug applicant. If the technical solution actually implemented by the generic drug applicant is inconsistent with the declared technical solution, it shall bear legal responsibility in accordance with the relevant laws and regulations on drug supervision and administration; if the patentee or interested party believes that the technical solution actually implemented by the generic drug applicant constitutes infringement, a separate lawsuit for patent infringement may also be filed. Therefore, whether the technical solution actually implemented by a generic drug applicant is the same as the application materials is generally not within the scope of examination to confirm that the dispute falls within the scope of patent protection.

2. The court of second instance held that both the donation [to the public] rule and the estoppel rule can constitute a restriction on the application of the principle of equivalence, both of which aim to achieve a reasonable balance between equitably protecting the interests of the patentee and safeguarding the interests of the public. If the conditions for limiting the application of the principle of equivalence are met, there is usually no need to judge whether the two features constitute similar means, functions, and effects, and whether those skilled in the art can conceptualize them without creative work. In this case, since Haihe Company claimed the application of the estoppel rule by virtue of the amendment of the claims by Chugai Pharmaceutical Co., Ltd., and claimed the application of the donation rule by the patent text as the result of the amendment, the court of second instance first rendered a judgment on whether the rules on estoppel should be applied on the basis of the amendment of the claims by the patentee.

The case numbers are:

北京知识产权法院(2021)京73民初1438号民事判决书

最高人民法院(2022)最高法知民终905号民事判决书

The full text of the decision courtesy of 知识产权那点事 is available here (Chinese only).

© 2022 Schwegman, Lundberg & Woessner, P.A. All Rights Reserved.

Uyghur Forced Labor Prevention Act Takes Effect: What Importers Need to Know

The Uyghur Forced Labor Prevention Act (UFLPA) is in effect as of June 21, 2022. Congress passed the Act in December 2021 to increase enforcement of longstanding U.S. policy prohibiting the importation of goods, or components thereof, made with forced labor and to create a “rebuttable presumption” that merchandise from the Xinjiang Uyghur Autonomous Region (XUAR) or by an entity on the UFLPA Entity List is made with forced labor and thereby prohibited from entry into the United States. The rebuttable presumption applies to downstream products that incorporate inputs from XUAR, regardless of where the finished products are manufactured, including goods from outside XUAR in the People’s Republic of China (PRC), or in third countries. There is no de minimis provision in the law – any prohibited content, no matter how small, will make a product subject to the rebuttable presumption made by the law. If an importer can demonstrate by “clear and convincing” evidence that the goods were not produced wholly or in part by forced labor, U.S. Customs and Border Protection (CBP) will grant an “exception” to the presumption. The UFLPA provides for increased detentions and seizures of merchandise and potential civil and criminal penalties. See prior GT Alerts on the UFLPA.

Pursuant to the UFLPA, a multi-agency task force chaired by the Department of Homeland Security was mandated to develop a strategy for the Act’s implementation. On June 17, in anticipation of the June 21 effective date, DHS released the “Strategy to Prevent the Importation of Goods Mined, Produced, or Manufactured with Forced Labor in the People’s Republic of China” (Enforcement Strategy), which includes:

  • An assessment of risk of importing goods mined, produced, or manufactured, wholly or in part, in the PRC; according to the strategy, complex supply chains that touch XUAR are “highly susceptible to contamination by goods made using forced labor.”
  • list of entities affiliated with forced labor; therefore, their products are subject to the presumption that their goods are prohibited from entry. The Entity list will be updated multiple times per year and will be publicly available.
  • A list of high priority sectors and products including apparel and textiles, cotton and cotton products, polysilicon, and tomato products. Other products listed include footwear, nails, electronics, and toys.
  • Guidance to importers advising that companies need heightened due diligence to ensure compliance with UFLPA and to identify potential supply chain exposure to Xinjiang. Supply chain tracing is the general method to demonstrate that goods are free of inputs from Xinjiang, but CBP expects that barriers to supply chain tracing may make it difficult for importers to be compliant and has stated that third-party audits alone are insufficient to demonstrate due diligence.

Should CBP detain goods on suspicion of being made wholly or in part with forced labor, the importer has options. It can re-export the goods (up until CBP seizes them); it can abandon the goods; it can seek an “exception” for the goods, to get them released from CBP custody; it can also provide information to CBP demonstrating that the goods are not subject in any way to the Act. The evidence and documentation needed for the latter two must be “clear and convincing.”

It should be noted that in order to obtain an “exception” for goods that have been detained, an importer must meet all three of the following requirements:

  • Provide clear and convincing evidence that the detained goods were not made in whole or in part with forced labor, or were sourced from entities on the Entity List.
  • Fully and substantively respond to any questions from CBP.
  • Show that it has complied with all of the requirements set out in the Enforcement Strategy and CBP’s Operational Guidance (i.e., due diligence, supply chain tracing and management, etc.).

The Enforcement Strategy document provides importers with guidance in the following three areas:

  • Due diligence, effective supply chain tracing, and supply chain management measures to ensure that no goods violating the Act enter the importer’s supply chain.
  • The type, nature, and extent of evidence that demonstrates that goods originating in China were not mined (or grown), produced, or manufactured wholly or in part in Xinjiang.
  • The type, nature, and extent of evidence that demonstrates goods originating in China, including goods detained under Section 307 of the Tariff Act, were not mined (or grown), produced, or manufactured wholly or in part with forced labor.

CBP has made it clear that should there be a detention, participants in the Customs and Trade Partnership Against Terrorism program (C-TPAT) will be prioritized for review of submissions to rebut the presumption that the merchandise was made with forced labor.

Importers may wish to plan for contingencies should CBP detain imported merchandise, map complex supply chains and review purchase agreements and supplier codes of conduct.

©2022 Greenberg Traurig, LLP. All rights reserved.

Uyghur Forced Labor Prevention Act Is Coming… Are You Ready? CBP Issues Hints at the Wave of Enforcement To Come

US Customs and Border Protection (CBP) has issued some guidance relating to its enforcement of the Uyghur Forced Labor Prevention Act (UFLPA) prior to June 21, 2022, the effective date of the rebuttable presumption.

What to Know

  • US Customs and Border Protection (CBP) has issued some guidance relating to its enforcement of the Uyghur Forced Labor Prevention Act (UFLPA) prior to June 21, 2022, the effective date of the rebuttable presumption.
  • The new guidance imposes tighter timelines and a higher burden of evidence on importers to rebut the presumption that merchandise was produced with forced labor. If CBP does not make a decision within specific timeframes, goods will automatically be deemed excluded.
  • CBP is expected to issue additional technical guidance at the end of May or early June. The Department of Homeland Security (DHS) is also expected to issue guidance closer to June 21, 2022.
  • CBP is scheduled to host informational webinars detailing their UFLPA guidance in the coming weeks.

What’s New: Tighter Timelines  

While US importers were eagerly anticipating the issuance of technical guidance regarding implementation of the UFLPA from CBP last week, which is now expected this week, CBP did post a new guidance document summarizing the UFLPA and forced labor Withhold Release Orders (WRO) enforcement mechanisms. Specifically, CBP’s authority to detain merchandise under the UFLPA will be pursuant to 19 CFR § 151.16, which provides for a much different timeline for the detention of merchandise than the WRO process. Under this process, if Customs does not make a timely decision regarding admissibility, goods are automatically excluded.

UFLPA Timeline Enforcement under 19 CFR § 151.16

Number of Days

Actions

5 Days from Presentation for Examination

CBP must decide whether to release or detail merchandise

  • If the merchandise is not released, it is detained
5 Days after Decision to Release or Detain

CBP will issue a notice to importer advising them of:

  • The initiation of detention
  • Date merchandise examined
  • Reason for detention
  • Anticipated length of detention
  • Nature of tests and inquiries to be conducted
  • Information to accelerate disposition
  Upon written request, CBP must provide importer with testing procedures, methodologies used, and testing results
Within 30 Days of Examination

CBP will make a final determination as to the admissibility of merchandise

  • If CBP does not make a determination within the 30-day period, the merchandise will be deemed excluded
  • This means any submission to rebut the presumption should be made before this 30 day period
Within 180 Days of CBP Determination/Exclusion Importers may protest CBP’s final determination
Within 30 Days After Protest Submitted The protest is deemed denied if CBP does not grant or deny the protest within 30 days
Within 180 Days after the Date the Protest is Denied

The importer may commence a court action contesting the denied protest (28 U.S.C. § 1581(a))

  • In a court action, CBP must establish by a preponderance of the evidence that an admissibility decision has been reached for good cause
  • Customs can decide to grant the protest after the deemed denial but before a court case is filed

This is a much shorter timeline than the WRO process. Importantly, a company contesting CBP’s detention of merchandise pursuant to the UFLPA would be required to submit documentation to rebut the presumption within the 30-day period that CBP is assessing admissibility, whereas the WRO process permits 90 days. Like the WRO process, the importer may also file a protest 180 days after CBP makes its final determination regarding the exclusion.

CBP Listening Session: A Higher Burden of Evidence 

On Tuesday, May 24, 2022, CBP provided information regarding the publication of guidance and enforcement of the UFLPA:

  • CBP Publication of Guidance. CBP’s guidance regarding its enforcement of the rebuttable presumption and the UFLPA is scheduled to be published the week of May 30.
  • DHS Publication of Guidance. DHS guidance will be published on or about June 21, 2022, which will include information relating to supply chain due diligence, importer guidance, and the entity lists.
  • Clear and Convincing Evidence Required to Rebut the Presumption that Merchandise was Produced with Forced Labor. It was confirmed that the UFLPA will have a much higher burden of evidence required to rebut the presumption that merchandise was produced with forced labor than that of a WRO. Any exception to the rebuttable presumption must be reported to Congress, and thus the level of evidence that will be required to overcome the rebuttable presumption is very high. As a practical matter, it appears that very few detained entries will be released. Importers are advised to start conducting due diligence on supply chains in order to ensure that they will be able to obtain documentation should merchandise be detained once the rebuttable presumption goes into effect. Importantly, products that are subject to an existing WRO from Xinjiang will now be enforced under the UFLPA process instead of the WRO process.
  • Evidence Required if Merchandise is Detained. The forthcoming guidance will set forth information regarding how an importer may meet the exception to the rebuttable presumption and to demonstrate that merchandise was not produced with forced labor, by meeting the following three criteria:
    • Demonstrate compliance with the Forced Labor Enforcement Task Force/DHS strategy;
    • Demonstrate compliance with CBP’s guidance and any inquiries that CBP raises; and
    • Provide clear and convincing evidence that the supply chain in question is free of forced labor.
  • Binding Rulings. Importers may apply for a binding ruling to confirm or request an exception to the rebuttable presumption under the UFLPA. Although CBP is still finalizing the process for importers to apply for a binding ruling, importers would be required to prove by clear and convincing evidence that merchandise is not produced with forced labor. If the ruling is granted, it applies to future shipments for the specific supply chain in question.
  • Known Importer Letters and Detention Notices. Going forward, CBP will not issue Known Importer letters, and CBP will notify importers that merchandise is subject to the UFLPA through the issuance of detention notices.
  • Detention of Merchandise. If goods are detained by CBP because they are suspected of having a nexus to Xinjiang Uyghur Autonomous Region (XUAR) of the People’s Republic of China (PRC), importers may either provide clear and convincing evidence that merchandise was not produced with forced labor or export the products. If detained products that fall under the UFLPA are comingled with other products that are not subject to the UFLPA, importers may request the segregation of the merchandise that is not subject to the UFLPA.
  • Chain of CBP Review for Importer Submissions Relating to Detained Merchandise. Chain of CBP review for the request of an exception to the rebuttable presumption has not been finalized yet. However, importers will be required to submit evidence that rebuts the presumption that merchandise was produced with forced labor to the applicable CBP Port Director. For the moment, the CBP Commissioner is the final individual who can ultimately make an exception to the rebuttable presumption, but CBP is deciding if it will delegate this responsibility to any additional persons.

Upcoming CBP Informational Webinars

CBP will be holding three webinar sessions, all covering the same material, to discuss and review its guidance relating to the UFLPA. The dates of the webinars and the registration links are listed below.

© 2022 ArentFox Schiff LLP

Europol: More Than Half of Counterfeits Originate in China

On March 7, 2022, the European Union Agency for Law Enforcement Cooperation (Europol) and the European Union Intellectual Property Office (EUIPO) jointly released the Intellectual Property Crime Threat Assessment 2022. Per the Assessment, China (including Hong Kong) was the main source of counterfeits based on number of counterfeits and by value of the counterfeits seized at the EU external borders.  Almost 76% of the fake goods detained were for trademark infringement; design infringement was the second most reported at 23% while copyright was third with 15%.

China and Turkey remain the main countries of origins for counterfeit clothing, shoes, bags, watches, and jewelry seized at the EU’s border. These goods are mostly ordered online and discovered as part of postal shipments or on passengers entering the EU.

Similarly, China is the country of origin for most of the seized counterfeit electrical/electronic and computer equipment, mobile phones and accessories. With respect to mobile phones, the Assessment states,

…the visual appearance of the counterfeit devices is very convincing, closely mimicking the external characteristics of the original phones. However, typically some features and software characteristics are missing and the International Mobile Equipment Identity (IMEI) is often fake.  The use of cheap and substandard electric components, which can be found in fake batteries, headphones or chargers, pose safety risks.

“China and Turkey were among the most frequently reported non-EU countries of origin for counterfeit food and drink seized at the EU’s external border.” Similarly, counterfeit perfumes and cosmetic products often originate from China and Turkey.

In addition to ready-to-use IPR-infringing goods, product components, such as aroma compounds, fixatives and solvents, are increasingly being seized. These components are used to create the final counterfeit products in the EU.

More worrisome, China and Turkey were the main origin of counterfeit pharmaceutical products.

Toys round out the top 10 counterfeits with China also being main point of origin.

The full Assessment is available here: IP_Crime_Threat_Assessment_2022_FullR_en.

© 2022 Schwegman, Lundberg & Woessner, P.A. All Rights Reserved.

Chinese APT41 Attacking State Networks

Although we are receiving frequent alerts from CISA and the FBI about the potential for increased cyber threats coming out of Russia, China continues its cyber threat activity through APT41, which has been linked to China’s Ministry of State Security. According to Mandiant, APT41 has launched a “deliberate campaign targeting U.S. state governments” and has successfully attacked at least six state government networks by exploiting various vulnerabilities, including Log4j.

According to Mandiant, although the Chinese-based hackers are kicked out of state government networks, they repeat the attack weeks later and keep trying to get in to the same networks via different vulnerabilities (a “re-compromise”). One such successful vulnerability that was utilized is the USAHerds zero-day vulnerability, which is a software that state agriculture agencies use to monitor livestock. When the intruders are successful in using the USAHerds vulnerability to get in to the network, they can then leverage the intrusion to migrate to other parts of the network to access and steal information, including personal information.

Mandiant’s outlook on these attacks is sobering:

“APT41’s recent activity against U.S. state governments consists of significant new capabilities, from new attack vectors to post-compromise tools and techniques. APT41 can quickly adapt their initial access techniques by re-compromising an environment through a different vector, or by rapidly operationalizing a fresh vulnerability. The group also demonstrates a willingness to retool and deploy capabilities through new attack vectors as opposed to holding onto them for future use. APT41 exploiting Log4J in close proximity to the USAHerds campaign showed the group’s flexibility to continue targeting U.S state governments through both cultivated and co-opted attack vectors. Through all the new, some things remain unchanged: APT41 continues to be undeterred by the U.S. Department of Justice (DOJ) indictment in September 2020.

Both Russia and China continue to conduct cyber-attacks against both private and public networks in the U.S. and there is no indication that the attacks will subside anytime soon.

Copyright © 2022 Robinson & Cole LLP. All rights reserved.