The Criminal Investigation Bureau has admitted that it handed out 54 malware-infested thumb drives to the public at a data security expo hosted by the Presidential Office from Dec. 11 to Dec. 15 last year.
The malware-infected USB sticks were among 250 drives that the bureau gave to the winners of a game about cybersecurity knowledge.
The malware program with the file name XtbSeDuA.exe was designed to collect personal data and transmit it to a Poland-based IP address that then bounces the information to unidentified servers, the bureau said, adding that it was known to have been used by an electronic fraud ring uncovered by Europol in 2015.
Only older, 32-bit computers are susceptible to the malware and common anti-virus software can successfully detect and quarantine it, the bureau said.
The 8-gigabyte thumb drives were purchased from contractors and some of them were made in China, but the bureau has ruled out Chinese espionage, it said, adding that the infection originated from an infected work station at New Taipei City-based contractor Shawo Hwa Industries Co (少華企業).
An employee at the company used the affected computer to transfer an operating system to the drives and test their storage capacity, transmitting the malware to 54 units, the bureau said.
Random sampling of the thumb drives, which were sourced from various contractors, failed to discover the malware, it added.
Distribution was halted in the afternoon of Dec. 12, after members of the public complained that drives had been flagged by their anti-virus programs, it said, adding that 20 drives have been recovered while 34 “remain in the wild.”
The server receiving the data from the malware was shut down after the bureau took measures to address the issue, it said.
National Police Agency Director-General Chen Chia-chin (陳家欽) and National Security Council cybersecurity adviser Lee Der-tsai (李德財) were briefed on the incident, an anonymous source said.
National security officials are unhappy that a Presidential Office event was compromised and concerned that the event might have been deliberately targeted by a hacker group, the source said, adding that they have demanded the bureau launch another probe.
The bureau has apologized to the Presidential Office and other government agencies that participated in the expo, the source said.
The navy’s new 10,600-tonne warship is on Tuesday to be christened the ROCN Yushan (玉山), as the nation’s indigenous shipbuilding program reaches a milestone, sources said yesterday. The vessel, previously referred to as the “new landing platform dock,” was at a shipyard with its name freshly painted on the hull with the number 1401, the Liberty Times (the sister paper of the Taipei Times) reported yesterday, citing an unnamed observer. Democratic Progressive Party Legislator Wang Ting-yu (王定宇), a member of the legislature’s National Defense and Foreign Affairs Committee, confirmed the report in a Facebook post. The NT$4.635 billion (US$163 million) ship is designed
INTERNATIONAL WEED DAY: Advocates are to hold a demonstration to push for the decriminalization of marijuana and allowing its use for treatment of certain conditions It is time for Taiwanese society to examine the medical benefits of cannabis, in line with the international trend to lift restrictions on and decriminalize the use of marijuana, two legislators said yesterday, ahead of tomorrow’s “Rally for Equal Rights for Cannabis” in Taipei. Taiwan is one of a few countries holding a “420 International Weed Day” event — which usually takes place around the April 20 weekend — as most nations have canceled it this year because of the COVID-19 pandemic, said organizer Green Sensation, which is composed of doctors, lawyers and entertainers, among others. The group released a
DIALOGUE SOUGHT: Washington said it was concerned about the pattern of ongoing attempts to intimidate Taiwan after the 10th day of PLA activity in the region The US on Monday urged Beijing to stop its multifaceted pressure campaign against Taiwan after China sent 25 military jets into Taiwan’s air defense identification zone. “The United States notes with concern the pattern of ongoing PRC [People’s Republic of China] attempts to intimidate the region, including Taiwan,” a US Department of State spokesperson said in an e-mail response to questions. “We urge Beijing to cease its military, diplomatic and economic pressure against Taiwan, and instead engage in meaningful dialogue with Taiwan.” The Ministry of National Defense said that 25 Chinese military aircraft entered the zone on Monday. It was the 10th straight
‘NOT ENTHUSIASTIC’: People who have been approved by the CECC as special cases who need to travel, such as foreign diplomats, would be able to receive a vaccine The Central Epidemic Command Center (CECC) yesterday expanded the eligibility for COVID-19 vaccination to the fourth priority group — people who need to travel abroad for special reasons — adding that out-of-pocket vaccines would be available from Wednesday next week. Minister of Health and Welfare Chen Shih-chung (陳時中), who heads the center, said although Taiwan’s COVID-19 vaccination program was on Monday expanded to include the top three groups in the priority list, people are still “not enthusiastic” about getting vaccinated. “Only 1,220 people received a vaccine shot on Tuesday, and a total of 27,113 people have received COVID-19 vaccination” so far, he