A China-based network stole Indian military secrets, hacked the Dalai Lama’s office and computers around the world in an elaborate cyber espionage scheme, Canadian researchers said Tuesday.
Researchers at the University of Toronto’s Citizen Lab said they documented a “complex ecosystem of cyber-espionage that systematically compromised government, business, academic and other computer networks in India, the offices of the Dalai Lama, the UN and several other countries.”
Data stolen from dozens of hacked computers mostly in India contained sensitive information about missile systems and artillery designs and Sino-Indian relations, they said in a report titled Shadows in the Cloud.
Personal, financial and business information of citizens from 31 countries was accessed, including from Canadian visa applications.
“We recovered one document that appears to be an encrypted diplomatic correspondence, two documents classified as ‘SECRET,’ six as ‘RESTRICTED’ and five as ‘CONFIDENTIAL,’” the researchers said.
At a press conference, researcher Greg Walton said these were “very targeted and deliberate attacks.”
“They suggest to us a shift is occurring from criminal and industrial espionage in cyberspace to a possibility of political espionage, whether that is directed by government or not,” he said.
Walton explained the attacks “were specifically crafted to hit individuals, usually in positions of power.”
He said state spies, or criminal groups aiming to sell information to governments are likely involved. “We believe a market has emerged for this,” he said.
The researchers traced the attacks to southern China, “and to known entities within the criminal underground of the PRC [People’s Republic of China].”
At one point, they even tracked down and chatted online with an unidentified suspect.
China denied involvement in the attacks cited in the Citizen Lab report, which comes just weeks after Google effectively shut down its China search engine over censorship and cyber-attacks.
“Some reports have, from time to time, been heard of insinuating or criticizing the Chinese government ... I have no idea what evidence they have or what motives lie behind,” Chinese Foreign Ministry spokeswoman Jiang Yu (姜瑜) said.
The report highlighted what it said was “an obvious correlation to be drawn between the victims, the nature of the documents stolen, and the strategic interests of the Chinese state.”
Recovered files detailed India’s security situation in Assam, Manipur, Nagaland and Tripura states, India’s international relations with West Africa, Russia and the Middle East, and concerned Naxalite and Maoist “extremists.”
One file contained personal information on a member of India’s Directorate General of Military Intelligence. About 1,500 letters sent from the Dalai Lama’s office in 2009 were also recovered.
The researchers said the attacks would start with the opening of an attachment in an email seemingly sent by a familiar person, infecting computers.
The hackers would then misuse services such as Twitter, Google Groups, Blogspot and Yahoo Mail to send “new malicious binaries to compromised computers” ordering them to transfer documents to a “drop zone.”
The Canadian researchers traced the cyber-attacks to servers in Chengdu, China, but could not identify the culprits. Chengdu is home to the Chinese military’s technical reconnaissance bureaus tasked with signals intelligence collection.
Several infected computers were also found to be “checking in” with a server in nearby Chongqing, China, where organized crime groups reportedly operate online.
“We have no evidence in this report of the involvement of the People’s Republic of China or any other government in the Shadow network ... or that the attackers were directed in some manner — either by sub-contract or privateering — by agents of the Chinese state,” the report concluded.
“But an important question to be entertained is whether the PRC will take action to shut the Shadow network down,” the report said.
The Lithuanian Ministry of National Defense recommended that consumers avoid buying Chinese mobile phones and advised people to throw away the ones they have now after a government report found the devices had built-in censorship capabilities. Flagship phones sold in Europe by China’s smartphone giant Xiaomi Corp (小米) have a built-in ability to detect and censor terms such as “Free Tibet,” “Long live Taiwan independence” or “democracy movement,” Lithuania’s state-run cybersecurity body said on Tuesday. The capability in Xiaomi’s Mi 10T 5G phone software had been turned off for the “European Union region,” but can be turned on remotely at any time,
CLOSE COOPERATION: A House of Representatives bill suggests inviting Taiwan’s navy to participate in the world’s largest international maritime military exercises The US House of Representatives on Thursday passed its annual defense policy bill, which includes provisions recommending that Taiwan be included in next year’s Rim of the Pacific Exercise (RIMPAC) and enhanced cooperation between Taiwan and the US National Guard. The House approved the US$777.9 billion National Defense Authorization Act for Fiscal Year 2022 in a 316-113 vote. The 1,390-page bill includes three major provisions related to Taiwan under sections 1243, 1247 and 1248. Section 1248 recommends that the US invite Taiwan’s navy to participate in next year’s RIMPAC. Taiwan has never been invited to participate in the event, which is the world’s largest
CLOSED DOORS? The new US rules, which are to be implemented in November, have sparked concern in Taiwan, given its low fully vaccinated coverage rate The US plans to allow entry to most foreign air travelers as long as they are fully vaccinated against COVID-19 — while adding a testing requirement for unvaccinated Americans and barring entry for foreigners who have not received shots. The measures announced on Monday by the White House mark the most sweeping change to US travel policies in months, and widen the gap in rules between vaccinated people — who would see restrictions relaxed — and unvaccinated people. The new rules would replace existing bans on foreigners’ travel to the US from certain regions, including Europe. While the move would open the
‘FIGHT FOR VICTORY’: Eric Chu said his election victory would be the beginning of the DPP’s worries and that he would open all channels of communication with China Former New Taipei City mayor Eric Chu (朱立倫) was yesterday elected Chinese Nationalist Party (KMT) chairman in a four-way race that included outgoing chairman Johnny Chiang (江啟臣). Chu, 60, garnered 85,164 votes, or 45 percent of the 187,998 KMT members who cast ballots. Sun Yat-sen School president Chang Ya-chung (張亞中) trailed behind with 60,632 votes, followed by Chiang with 35,090 votes and former Changhua County commissioner Cho Po-yuan (卓伯源) with 5,133 votes. Voter turnout was 50.71 percent. This will be Chu’s second time heading the party. He was elected KMT chairman in an unopposed by-election in January 2015 and resigned in January