Great Cannon
Chinese government cyberweapon attack tool
- 2 min read
- 3 chapters
Related on Lably
Through Internet, Web server and Malware
Besides launching denial-of-service attacks, the tool is also capable of monitoring web traffic and distributing malware in targeted attacks in ways that are similar to the Quantum Insert system used by the U.S. National Security Agency.
Mechanism
The Great Cannon hijacks insecure traffic inbound to servers within the Great Firewall, and injects JavaScript that redirects that traffic to the target. These attacks fail when websites have HTTPS encryption.
Sign in to keep reading
2 more chapters are free with a Lably account.
Known uses
The first known targets of the Great Cannon (in late March 2015) were websites hosting censorship-evading tools, including GitHub, a web-based code hosting service, and GreatFire, a service monitoring blocked websites in China.
In 2017, the Great Cannon was used to attack the Mingjing News website.
In December 2019, the Great Cannon was used to attempt to take down the Hong Kong–based LIHKG online forum, even though the Basic Law of Hong Kong clearly stated that Hong Kong's internet was the affairs of Hong Kong and Hong Kong only.
In 2021, the Great Cannon was used to attack Flexpool, an Ethereum crypto mining pools Hong Kong servers.
Reaction
Quartz reported that the 2015 GitHub attack caused "severe" political problems for China, including the United States Department of State viewing it as "an attack against US infrastructure".