Western intelligence agencies on Tuesday warned of an increasing threat from Beijing’s security services to use malicious mobile phone applications to surveil Taiwanese independence activists, Tibetan rights advocates and others opposed by the Chinese government.
An advisory issued late on Tuesday warned of “the growing threat” posed by malicious surveillance software deployed by a Chengdu, China-based contractor reported to have ties to the Chinese Ministry of Public Security.
The advisory was signed by cybersecurity agencies in the UK, the US, Canada, New Zealand, Australia and Germany.
Photo: Reuters
Those most at risk include people connected to Taiwanese independence, Tibetan rights, Uighurs and other minorities in Xinjiang, democracy advocates — including in Hong Kong — and the Falun Gong spiritual movement, the British National Cyber Security Centre (NCSC) said in the advisory.
The warning comes amid increasing tensions surrounding Taiwan, including Chinese military drills around the nation on Tuesday and Wednesday last week, and a March 28 visit to the Philippines by US Secretary of Defense Pete Hegseth in which he reaffirmed Washington’s commitment to deterring Chinese aggression in the region.
The Chengdu-based contractor, Sichuan Dianke Network Security Technology Co Ltd (四川電科網路安全技術有限公司), was linked to the deployment of a pair of distinct malware packages. They were tracked as “Badbazaar” and “Moonshine” and used to ferret sensitive information from mobile devices, while also giving operators remote access to devices’ cameras, microphones and location data, the advisory said.
The warning is for non-governmental organizations, journalists, businesses and other individuals who advocate for or represent the groups, the NCSC said in the advisory.
“The indiscriminate way this spyware is spread online also means there is a risk that infections could spread beyond intended victims,” it said.
Chinese embassy in Washington spokesman Liu Pengyu (劉鵬宇) said that China “firmly opposes the smear attacks against China without any factual basis,” and that the tracing of cyberattacks is complex.
“We hope that relevant parties will adopt a professional and responsible attitude when characterizing cyberincidents, basing their conclusions on sufficient evidence rather than unfounded speculation and accusations,” he said.
The warnings build on previous cybersecurity industry reporting that malware and infrastructure have been used by the contractor going back several years. The advisory cited a Jan. 29 report published by Intelligence Online, a news organization focused on international intelligence operations, linking the malware to the contractor.
The contractor has provided services to the Chinese ministry, the report said.
The FBI, US National Security Agency and intelligence agencies in Australia, Canada, Germany and New Zealand participated in the advisories, the NCSC said.
The FBI declined to comment, and the NSA did not respond to requests for comment.
In his National Day Rally speech on Sunday, Singaporean Prime Minister Lawrence Wong (黃循財) quoted the Taiwanese song One Small Umbrella (一支小雨傘) to describe his nation’s situation. Wong’s use of such a song shows Singapore’s familiarity with Taiwan’s culture and is a perfect reflection of exchanges between the two nations, Representative to Singapore Tung Chen-yuan (童振源) said yesterday in a post on Facebook. Wong quoted the song, saying: “As the rain gets heavier, I will take care of you, and you,” in Mandarin, using it as a metaphor for Singaporeans coming together to face challenges. Other Singaporean politicians have also used Taiwanese songs
NORTHERN STRIKE: Taiwanese military personnel have been training ‘in strategic and tactical battle operations’ in Michigan, a former US diplomat said More than 500 Taiwanese troops participated in this year’s Northern Strike military exercise held at Lake Michigan by the US, a Pentagon-run news outlet reported yesterday. The Michigan National Guard-sponsored drill involved 7,500 military personnel from 36 nations and territories around the world, the Stars and Stripes said. This year’s edition of Northern Strike, which concluded on Sunday, simulated a war in the Indo-Pacific region in a departure from its traditional European focus, it said. The change indicated a greater shift in the US armed forces’ attention to a potential conflict in Asia, it added. Citing a briefing by a Michigan National Guard senior
CHIPMAKING INVESTMENT: J.W. Kuo told legislators that Department of Investment Review approval would be needed were Washington to seek a TSMC board seat Minister of Economic Affairs J.W. Kuo (郭智輝) yesterday said he received information about a possible US government investment in Taiwan Semiconductor Manufacturing Co (TSMC, 台積電) and an assessment of the possible effect on the firm requires further discussion. If the US were to invest in TSMC, the plan would need to be reviewed by the Department of Investment Review, Kuo told reporters ahead of a hearing of the legislature’s Economics Committee. Kuo’s remarks came after US Secretary of Commerce Howard Lutnick on Tuesday said that the US government is looking into the federal government taking equity stakes in computer chip manufacturers that
CLAMPING DOWN: At the preliminary stage on Jan. 1 next year, only core personnel of the military, the civil service and public schools would be subject to inspections Regular checks are to be conducted from next year to clamp down on military personnel, civil servants and public-school teachers with Chinese citizenship or Chinese household registration, the Mainland Affairs Council (MAC) said yesterday. Article 9-1 of the Act Governing Relations Between the People of the Taiwan Area and the Mainland Area (臺灣地區與大陸地區人民關係條例) stipulates that Taiwanese who obtain Chinese household registration or a Chinese passport would be deprived of their Taiwanese citizenship and lose their right to work in the military, public service or public schools, it said. To identify and prevent the illegal employment of holders of Chinese ID cards or