China appears to have used mobile phone networks in the Caribbean to surveil US mobile phone subscribers as part of its espionage campaign against Americans, according to a mobile network security expert who has analyzed sensitive signals data.
The findings paint an alarming picture of how China has allegedly exploited decades-old vulnerabilities in the global telecommunications network to route “active” surveillance attacks through telecoms operators.
The alleged attacks appear to be enabling China to target, track and intercept telephone communications of US phone subscribers, according to research and analysis by Gary Miller, a Washington state-based former mobile network security executive.
In some cases China appeared to have used networks in the Caribbean to conduct its surveillance, Miller said.
At the heart of the allegations are claims that China, using a state-controlled mobile phone operator, is directing signaling messages to US subscribers, usually while they are traveling abroad.
Signaling messages are commands that are sent by a telecoms operators across the global network, unbeknownst to a mobile phone user. They allow operators to locate mobile phones, connect mobile phone users to one another and assess roaming charges.
However, some signaling messages can be used for illegitimate purposes, such as tracking, monitoring, or intercepting communications.
US mobile phone operators can block many such attempts, but Miller believes that the US has not gone far enough to protect mobile phone users, who he believes are not aware of how insecure their communications are.
Miller focused his research on messages that he said did not appear legitimate, either because they were “unauthorized” by the GSMA, an international standard-setting body for the telecommunications industry, or because the messages were sent from a location that did not match where a user was traveling.
“Government agencies and [the US] Congress have been aware of public mobile network vulnerabilities for years,” he said. “Security recommendations made by our government have not been followed and are not sufficient to stop attackers.”
“No one in the industry wants the public to know the severity of ongoing surveillance attacks. I want the public to know about it,” he added.
Miller said that he found that in 2018 China had conducted the highest number of apparent surveillance attacks against US mobile phone subscribers over 3G and 4G networks.
He said the vast majority of these apparent attacks were routed through a state-owned telecoms operator, China Unicom Ltd (中國聯通), which he said pointed in very high likelihood to a state-sponsored espionage campaign.
Overall, Miller said he believed tens of thousands of US mobile users were affected by the alleged attacks emanating from China from 2018 to this year.
“Once you get into the tens of thousands, the attacks qualify as mass surveillance, which is primarily for intelligence collection and not necessarily targeting high-profile targets. It might be that there are locations of interest, and these occur primarily while people are abroad,” Miller said.
Miller said he believed the messages were indicative of surveillance of mass movement patterns and communication of US travelers.
Miller also found what he called unique cases in which the same mobile phone users who appear to have been targeted via China Unicom also appear to have been targeted simultaneously through two Caribbean operators: Cable & Wireless Communications (Flow) in Barbados and Bahamas Telecommunications Co.
The incidences, which occurred dozens of times over a four to eight-week period, were so unusual that Miller said they were a “strong and clear” indicator that these were coordinated attacks.
Miller said that last year most apparent attacks against US subscribers over the 3G network emanated from Barbados, while China significantly reduced the volume of messages to US subscribers.
“China reduced attack volumes in 2019, favoring more targeted espionage and likely using proxy networks in the Caribbean to conduct its attacks, having close ties in both trade and technology investment,” Miller said.
China Unicom said in a statement that it “strongly refutes the allegations that China Unicom has engaged in active surveillance attacks against US mobile phone subscribers using access to international telecommunications networks.”
SECRET OUT: Minister of Health and Welfare Chen Shih-chung yesterday accidentally revealed that the infections occurred at the ministry’s Taoyuan General Hospital The Central Epidemic Command Center (CECC) yesterday reported the fifth COVID-19 case in a cluster infection at a Taoyuan hospital, where four other medical workers were confirmed to have been infected over the past week. The latest case is a nurse who had tested negative on Tuesday last week, Minister of Health and Welfare Chen Shih-chung (陳時中), who heads the CECC, told a news conference. However, on Thursday, she developed symptoms, such as nasal congestion and a cough, and a second test yesterday found that she was infected, Chen said. She is the head nurse of a ward where two
VIGILANCE: While two of the cases are family members of a nurse, there is no sign of community spread and the source of infection is identifiable, the CECC said The Central Epidemic Command Center (CECC) yesterday reported four new domestic COVID-19 cases associated with a cluster infection at a Taoyuan hospital. Since the first case was identified on Tuesday last week, five healthcare workers — two doctors and three nurses — at the Ministry of Health and Welfare’s Taoyuan General Hospital have tested positive for the virus. Minister of Health and Welfare Chen Shih-chung (陳時中), who heads the center, said that two of the four new cases are the husband and daughter of a nurse (case No. 863) who had earlier been confirmed to have COVID-19. The husband (case No. 864)
PILLARS OF DEMOCRACY: US Ambassador to the UN Kelly Craft posted online after the virtual meeting that Taiwan should be able to share its successes in global venues President Tsai Ing-wen (蔡英文) and US Ambassador to the UN Kelly Craft yesterday held a virtual meeting, during which Tsai described Taiwan as a “force for good” that deserves a place on the world stage, while Craft reaffirmed Washington’s support for Taiwan’s international participation. The virtual talk was held at about 11am, after Craft’s trip to Taiwan was abruptly canceled. She had been scheduled to meet with Tsai in person at the Presidential Office in Taipei yesterday morning as part of a three-day visit to Taiwan. On Tuesday, the US Department of State canceled all of its planned trips, citing a need
‘CONTAINED’: The CECC is not considering locking down the hospital where the infections were detected, as their source has been found, Chen Shih-chung said The Central Epidemic Command Center (CECC) yesterday reported one new domestic COVID-19 case, a doctor at a hospital in northern Taiwan where three other medical workers were confirmed to have the disease over the past week. The new case — No. 856 — is a doctor who had treated a COVID-19 patient together with case No. 838, said Minister of Health and Welfare Chen Shih-chung (陳時中), who heads the center. Case No. 838, confirmed as a locally infected COVID-19 case on Tuesday, was the first case in the hospital cluster, and later infected his partner, who is a nurse at the same
RSS