Chinese-made port cranes in US included ‘backdoor’ modems, House report says

Summary: A congressional examination revealed that China installed unauthorized cellular modems in ship-to-shore cranes, creating significant security vulnerabilities in U.S. port operations. The report highlights concerns over the integrity of critical infrastructure amid rising tensions between the U.S. and China.

Threat Actor: China | China
Victim: U.S. Ports | U.S. Ports

Key Point :

  • Unauthorized modems were installed in cranes, intended for data collection, posing a backdoor security risk.
  • Contracts allowed critical components to be sent to Chinese manufacturer ZPMC, raising concerns about foreign influence.
  • The U.S. is investing in domestic production of cranes to mitigate reliance on Chinese technology.
  • Heightened cybersecurity measures are being implemented at ports to counter potential threats.

A newly released congressional examination found that China placed various technological backdoors, such as modems, into ship-to-shore cranes that could give access to the machines.

The 51-page, Republican-led study, conducted by the House Select Committee on China and the House Homeland Security Committee, said “these cellular modems, not requested by U.S. ports or included in contracts, were intended for the collection of usage data on certain equipment. This constitutes a significant backdoor security vulnerability that undermines the integrity of port operations.”

In addition, contracts reviewed by lawmakers “revealed that many agreements allowed critical internal components from third party contractors to be sent” to Chinese manufacturer ZPMC for installation. 

The report, published Thursday, does not specify the exact nature of the modems, but said they were “connected to Linux computers on port cranes.” Technicians at the ports understood them to be for diagnostic purposes, the report said.

“These modems—although not necessary for the operation of the cranes—created an obscure method to collect information, and bypass firewalls in a manner that could potentially disrupt port operations.”

U.S. officials have long been concerned about China-made products used in critical infrastructure. Tensions have only increased over the threat of potential conflict between Washington and Beijing over Taiwan.

Speaking at a Center for Strategic and International Studies event earlier this week, Rob Silvers, DHS undersecretary for policy, noted the Biden administration has called for investing billions of dollars in cranes to counter Beijing’s potential influence.

He also noted the Coast Guard, which has regulatory authority over ports, ordered sites to implement better cybersecurity and the U.S. is working with  Japanese heavy industrials company Matsui to start domestic production of ship-to-shore cranes in America “ for the first time in decades, so that we have, in the long run, a reliable supply of that critical hardware that most American people never think about, but which they rely on every single day to get whatever is coming to their house.”

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

Source: https://therecord.media/port-cranes-china-modems-republican-house-report