Chinese hackers have allegedly tampered with widely used software distributed by a small Canadian customer service company, in what cybersecurity experts see as another example of a “supply chain compromise,” which was made infamous by the hack on US networking company SolarWinds.
US cybersecurity firm CrowdStrike said in a blog post that it had discovered malicious software being distributed by Vancouver-based Comm100, which provides customer service products, such as chat bots and social media management tools, to a range of clients around the globe.
The scope and scale of the hack was not immediately clear.
Photo: REUTERS
In a message, Comm100 said it on Thursday fixed its software and that more details would be forthcoming.
CrowdStrike researchers believe the malicious software was in circulation for a couple of days, but would not say how many companies had been affected, divulging only that “entities across a range of industries” were hit.
A person familiar with the matter said a dozen firms are known to be affected, although the actual figure could be much higher.
Photo: AFP
CrowdStrike's Senior VP of Intelligence Adam Meyers said that the hackers were suspected to be Chinese, citing their patterns of behavior, language in the code and that one affected firm had repeatedly been targeted by Chinese hackers in the past.
The Chinese government rejected the claim.
In an e-mail, Chinese embassy in the US spokesman Liu Pengyu (劉鵬宇) said officials in Beijing “firmly oppose and crack down on all forms of cyber hacking in accordance with the law” and that the US “has been loudly active in fabricating and spreading lies about so-called ‘Chinese hackers.’”
SILENCING CRITICS: In addition to blocking Taiwan, China aimed to prevent rights activists from speaking out against authoritarian states, a Cabinet department said The Ministry of Foreign Affairs (MOFA) yesterday condemned transnational repression by Beijing after RightsCon, a major digital human rights conference scheduled to be held in Zambia this week, was abruptly canceled due to Chinese pressure over Taiwanese participation. This year’s RightsCon, the world’s largest conference discussing issues “at the intersection of human rights and technology,” was scheduled to take place from tomorrow to Friday in Lusaka, and expected to draw 2,600 in-person attendees from 150 countries, along with 1,100 online participants. However, organizers were forced to cancel the event due to behind-the-scenes pressure from China, the ministry said, expressing its “strongest condemnation”
Iran’s Islamic Revolutionary Guard Corp (IRGC) yesterday said the US faced a choice between an “impossible” military operation or a “bad deal” with Tehran, after US President Donald Trump disparaged Iran’s latest peace proposal. Negotiations between the two countries have been deadlocked since a ceasefire came into effect on April 8, with only one round of direct peace talks held so far. Iran’s Tasnim and Fars news agencies reported that Tehran had submitted a 14-point proposal to mediator Pakistan, but Trump was quick to cast doubt on it. “I will soon be reviewing the plan that Iran has just sent to us, but
WHAT WAS ALL THAT FOR? Jaw Shaw-kong said that Cheng Li-wen had pushed for more drastic cuts and attacked him, just for the outcome to be nearly identical to his bill The legislature yesterday passed a supplementary budget bill to fund the purchase of separate packages of US military equipment, with the combined amount of spending capped at NT$780 billion (US$24.8 billion). The Chinese Nationalist Party (KMT) and Taiwan People’s Party (TPP) used their legislative majority to pass the bill, which runs until 2033 and has two main funding provisions. One was for NT$300 billion of arms sales already approved by the US for Taiwan on Dec. 17 last year, the other was for NT$480 billion for another arms package expected to be announced by Washington. The bill, which fell short of the NT$1.25
A group affiliated with indicted Chinese immigrant Xu Chunying (徐春鶯) is to be dissolved for monitoring Chinese immigrants in Taiwan, a source said yesterday. Xu, the secretary-general of the Cross-Strait Marriage and Family Service Alliance, was indicted on March 24 on charges of violating the Anti-Infiltration Act (反滲透法). The alliance “illegally monitored" Chinese immigrants living in Taiwan on behalf of the Chinese Communist Party (CCP) and the Ministry of the Interior is expected to dissolve the organization in the coming days under provisions of the Civil Associations Act (人民團體法), the source said. Xu, who married a Taiwanese in 1993 and became a Republic