A China-based network stole Indian military secrets, hacked the Dalai Lama’s office and computers around the world in an elaborate cyber espionage scheme, Canadian researchers said Tuesday.
Researchers at the University of Toronto’s Citizen Lab said they documented a “complex ecosystem of cyber-espionage that systematically compromised government, business, academic and other computer networks in India, the offices of the Dalai Lama, the UN and several other countries.”
Data stolen from dozens of hacked computers mostly in India contained sensitive information about missile systems and artillery designs and Sino-Indian relations, they said in a report titled Shadows in the Cloud.
Personal, financial and business information of citizens from 31 countries was accessed, including from Canadian visa applications.
“We recovered one document that appears to be an encrypted diplomatic correspondence, two documents classified as ‘SECRET,’ six as ‘RESTRICTED’ and five as ‘CONFIDENTIAL,’” the researchers said.
At a press conference, researcher Greg Walton said these were “very targeted and deliberate attacks.”
“They suggest to us a shift is occurring from criminal and industrial espionage in cyberspace to a possibility of political espionage, whether that is directed by government or not,” he said.
Walton explained the attacks “were specifically crafted to hit individuals, usually in positions of power.”
He said state spies, or criminal groups aiming to sell information to governments are likely involved. “We believe a market has emerged for this,” he said.
The researchers traced the attacks to southern China, “and to known entities within the criminal underground of the PRC [People’s Republic of China].”
At one point, they even tracked down and chatted online with an unidentified suspect.
China denied involvement in the attacks cited in the Citizen Lab report, which comes just weeks after Google effectively shut down its China search engine over censorship and cyber-attacks.
“Some reports have, from time to time, been heard of insinuating or criticizing the Chinese government ... I have no idea what evidence they have or what motives lie behind,” Chinese Foreign Ministry spokeswoman Jiang Yu (姜瑜) said.
The report highlighted what it said was “an obvious correlation to be drawn between the victims, the nature of the documents stolen, and the strategic interests of the Chinese state.”
Recovered files detailed India’s security situation in Assam, Manipur, Nagaland and Tripura states, India’s international relations with West Africa, Russia and the Middle East, and concerned Naxalite and Maoist “extremists.”
One file contained personal information on a member of India’s Directorate General of Military Intelligence. About 1,500 letters sent from the Dalai Lama’s office in 2009 were also recovered.
The researchers said the attacks would start with the opening of an attachment in an email seemingly sent by a familiar person, infecting computers.
The hackers would then misuse services such as Twitter, Google Groups, Blogspot and Yahoo Mail to send “new malicious binaries to compromised computers” ordering them to transfer documents to a “drop zone.”
The Canadian researchers traced the cyber-attacks to servers in Chengdu, China, but could not identify the culprits. Chengdu is home to the Chinese military’s technical reconnaissance bureaus tasked with signals intelligence collection.
Several infected computers were also found to be “checking in” with a server in nearby Chongqing, China, where organized crime groups reportedly operate online.
“We have no evidence in this report of the involvement of the People’s Republic of China or any other government in the Shadow network ... or that the attackers were directed in some manner — either by sub-contract or privateering — by agents of the Chinese state,” the report concluded.
“But an important question to be entertained is whether the PRC will take action to shut the Shadow network down,” the report said.
TRAGEDY STRIKES TAIPEI: The suspect died after falling off a building after he threw smoke grenades into Taipei Main Station and went on a killing spree in Zhongshan A 27-year-old suspect allegedly threw smoke grenades in Taipei Main Station and then proceeded to Zhongshan MRT Station in a random killing spree that resulted in the death of the suspect and two other civilians, and seven injured, including one in critical condition, as of press time last night. The suspect, identified as a man surnamed Chang Wen (張文), allegedly began the attack at Taipei Main Station, the Taipei Fire Department said, adding that it received a report at 5:24pm that smoke grenades had been thrown in the station. One man in his 50s was rushed to hospital after a cardiac arrest
A car bomb killed a senior Russian general in southern Moscow yesterday morning, the latest high-profile army figure to be blown up in a blast that came just hours after Russian and Ukrainian delegates held separate talks in Miami on a plan to end the war. Kyiv has not commented on the incident, but Russian investigators said they were probing whether the blast was “linked” to “Ukrainian special forces.” The attack was similar to other assassinations of generals and pro-war figures that have either been claimed, or are widely believed to have been orchestrated, by Ukraine. Russian Lieutenant General Fanil Sarvarov, 56, head
SAFETY FIRST: Double the number of police were deployed at the Taipei Marathon, while other cities released plans to bolster public event safety Authorities across Taiwan have stepped up security measures ahead of Christmas and New Year events, following a knife and smoke bomb attack in Taipei on Friday that left four people dead and 11 injured. In a bid to prevent potential copycat incidents, police deployments have been expanded for large gatherings, transport hubs, and other crowded public spaces, according to official statements from police and city authorities. Taipei Mayor Chiang Wan-an (蔣萬安) said the city has “comprehensively raised security readiness” in crowded areas, increased police deployments with armed officers, and intensified patrols during weekends and nighttime hours. For large-scale events, security checkpoints and explosives
PUBLIC SAFETY: The premier said that security would be tightened in transport hubs, while President Lai commended the public for their bravery The government is to deploy more police, including rapid response units, in crowded public areas to ensure a swift response to any threats, President William Lai (賴清德) said yesterday after a knife attack killed three people and injured 11 in Taipei the previous day. Lai made the remarks following a briefing by the National Police Agency on the progress of the investigation, saying that the attack underscored the importance of cooperation in public security between the central and local governments. The attack unfolded in the early evening on Friday around Taipei Main Station’s M7 exit and later near the Taipei MRT’s Zhongshan
RSS