A China-based network stole Indian military secrets, hacked the Dalai Lama’s office and computers around the world in an elaborate cyber espionage scheme, Canadian researchers said Tuesday.
Researchers at the University of Toronto’s Citizen Lab said they documented a “complex ecosystem of cyber-espionage that systematically compromised government, business, academic and other computer networks in India, the offices of the Dalai Lama, the UN and several other countries.”
Data stolen from dozens of hacked computers mostly in India contained sensitive information about missile systems and artillery designs and Sino-Indian relations, they said in a report titled Shadows in the Cloud.
Personal, financial and business information of citizens from 31 countries was accessed, including from Canadian visa applications.
“We recovered one document that appears to be an encrypted diplomatic correspondence, two documents classified as ‘SECRET,’ six as ‘RESTRICTED’ and five as ‘CONFIDENTIAL,’” the researchers said.
At a press conference, researcher Greg Walton said these were “very targeted and deliberate attacks.”
“They suggest to us a shift is occurring from criminal and industrial espionage in cyberspace to a possibility of political espionage, whether that is directed by government or not,” he said.
Walton explained the attacks “were specifically crafted to hit individuals, usually in positions of power.”
He said state spies, or criminal groups aiming to sell information to governments are likely involved. “We believe a market has emerged for this,” he said.
The researchers traced the attacks to southern China, “and to known entities within the criminal underground of the PRC [People’s Republic of China].”
At one point, they even tracked down and chatted online with an unidentified suspect.
China denied involvement in the attacks cited in the Citizen Lab report, which comes just weeks after Google effectively shut down its China search engine over censorship and cyber-attacks.
“Some reports have, from time to time, been heard of insinuating or criticizing the Chinese government ... I have no idea what evidence they have or what motives lie behind,” Chinese Foreign Ministry spokeswoman Jiang Yu (姜瑜) said.
The report highlighted what it said was “an obvious correlation to be drawn between the victims, the nature of the documents stolen, and the strategic interests of the Chinese state.”
Recovered files detailed India’s security situation in Assam, Manipur, Nagaland and Tripura states, India’s international relations with West Africa, Russia and the Middle East, and concerned Naxalite and Maoist “extremists.”
One file contained personal information on a member of India’s Directorate General of Military Intelligence. About 1,500 letters sent from the Dalai Lama’s office in 2009 were also recovered.
The researchers said the attacks would start with the opening of an attachment in an email seemingly sent by a familiar person, infecting computers.
The hackers would then misuse services such as Twitter, Google Groups, Blogspot and Yahoo Mail to send “new malicious binaries to compromised computers” ordering them to transfer documents to a “drop zone.”
The Canadian researchers traced the cyber-attacks to servers in Chengdu, China, but could not identify the culprits. Chengdu is home to the Chinese military’s technical reconnaissance bureaus tasked with signals intelligence collection.
Several infected computers were also found to be “checking in” with a server in nearby Chongqing, China, where organized crime groups reportedly operate online.
“We have no evidence in this report of the involvement of the People’s Republic of China or any other government in the Shadow network ... or that the attackers were directed in some manner — either by sub-contract or privateering — by agents of the Chinese state,” the report concluded.
“But an important question to be entertained is whether the PRC will take action to shut the Shadow network down,” the report said.
NO-LIMITS PARTNERSHIP: ‘The bottom line’ is that if the US were to have a conflict with China or Russia it would likely open up a second front with the other, a US senator said Beijing and Moscow could cooperate in a conflict over Taiwan, the top US intelligence chief told the US Senate this week. “We see China and Russia, for the first time, exercising together in relation to Taiwan and recognizing that this is a place where China definitely wants Russia to be working with them, and we see no reason why they wouldn’t,” US Director of National Intelligence Avril Haines told a US Senate Committee on Armed Services hearing on Thursday. US Senator Mike Rounds asked Haines about such a potential scenario. He also asked US Defense Intelligence Agency Director Lieutenant General Jeffrey Kruse
INSPIRING: Taiwan has been a model in the Asia-Pacific region with its democratic transition, free and fair elections and open society, the vice president-elect said Taiwan can play a leadership role in the Asia-Pacific region, vice president-elect Hsiao Bi-khim (蕭美琴) told a forum in Taipei yesterday, highlighting the nation’s resilience in the face of geopolitical challenges. “Not only can Taiwan help, but Taiwan can lead ... not only can Taiwan play a leadership role, but Taiwan’s leadership is important to the world,” Hsiao told the annual forum hosted by the Center for Asia-Pacific Resilience and Innovation think tank. Hsiao thanked Taiwan’s international friends for their long-term support, citing the example of US President Joe Biden last month signing into law a bill to provide aid to Taiwan,
China’s intrusive and territorial claims in the Indo-Pacific region are “illegal, coercive, aggressive and deceptive,” new US Indo-Pacific Commander Admiral Samuel Paparo said on Friday, adding that he would continue working with allies and partners to keep the area free and open. Paparo made the remarks at a change-of-command ceremony at Joint Base Pearl Harbor-Hickam in Hawaii, where he took over the command from Admiral John Aquilino. “Our world faces a complex problem set in the troubling actions of the People’s Republic of China [PRC] and its rapid buildup of forces. We must be ready to answer the PRC’s increasingly intrusive and
STATE OF THE NATION: The legislature should invite the president to deliver an address every year, the TPP said, adding that Lai should also have to answer legislators’ questions The Chinese Nationalist Party (KMT) yesterday proposed inviting president-elect William Lai (賴清德) to make a historic first state of the nation address at the legislature following his inauguration on May 20. Lai is expected to face many domestic and international challenges, and should clarify his intended policies with the public’s representatives, KMT caucus secretary-general Hung Meng-kai (洪孟楷) said when making the proposal at a meeting of the legislature’s Procedure Committee. The committee voted to add the item to the agenda for Friday, along with another similar proposal put forward by the Taiwan People’s Party (TPP). The invitation is in line with Article 15-2