US also does not doubt Apple and Amazon denials about Supermicro hack
The US Department of Homeland Security has no reason to doubt the statements made by Apple and Amazon. In it, the companies state that the reporting about a hack via a small chip on Supermicro servers is incorrect.
The ministry has released a statement saying it, like the UK, sees no reason to doubt the companies’ denials at this time. On Friday, the British National Cyber Security Center, which is part of the British intelligence service GCHQ, already said it saw no reason to question the statements of Apple and Amazon Web Services.
Apple has also sent a letter to Congress, reiterating that it has found no traces or evidence of a hack. The letter, which is in the hands of Reuters, was sent by George Stathakopoulos, Apple’s vice president of Information Security.
The letter states that Apple has repeatedly investigated the allegations and has found no evidence of the hack that Bloomberg claims took place. According to Stathakopoulos, Apple uses proprietary software that scans outgoing traffic to detect malware and malicious activity. “Nothing was ever found,” the letter said. Apple’s security chief says he is available to discuss the matter further with Congress.
Financial news agency Bloomberg released an extensive story last week in which it claims that large companies, including Apple and Amazon, have been victims of a hack via server supplier Super Micro. Motherboards of the servers would be equipped in China with an extra chip, which allowed access to the servers. According to Bloomberg, the hardware backdoor was discovered by the companies in 2015 and the FBI is said to have launched an investigation. According to the publication, the story is based on seventeen sources, both from the companies and government agencies. Apple indicates in its letter that some allegations are based on fewer sources and in some cases rely on one source.