A China-based network stole Indian military secrets, hacked the Dalai Lama’s office and computers around the world in an elaborate cyber espionage scheme, Canadian researchers said Tuesday.
Researchers at the University of Toronto’s Citizen Lab said they documented a “complex ecosystem of cyber-espionage that systematically compromised government, business, academic and other computer networks in India, the offices of the Dalai Lama, the UN and several other countries.”
Data stolen from dozens of hacked computers mostly in India contained sensitive information about missile systems and artillery designs and Sino-Indian relations, they said in a report titled Shadows in the Cloud.
Personal, financial and business information of citizens from 31 countries was accessed, including from Canadian visa applications.
“We recovered one document that appears to be an encrypted diplomatic correspondence, two documents classified as ‘SECRET,’ six as ‘RESTRICTED’ and five as ‘CONFIDENTIAL,’” the researchers said.
At a press conference, researcher Greg Walton said these were “very targeted and deliberate attacks.”
“They suggest to us a shift is occurring from criminal and industrial espionage in cyberspace to a possibility of political espionage, whether that is directed by government or not,” he said.
Walton explained the attacks “were specifically crafted to hit individuals, usually in positions of power.”
He said state spies, or criminal groups aiming to sell information to governments are likely involved. “We believe a market has emerged for this,” he said.
The researchers traced the attacks to southern China, “and to known entities within the criminal underground of the PRC [People’s Republic of China].”
At one point, they even tracked down and chatted online with an unidentified suspect.
China denied involvement in the attacks cited in the Citizen Lab report, which comes just weeks after Google effectively shut down its China search engine over censorship and cyber-attacks.
“Some reports have, from time to time, been heard of insinuating or criticizing the Chinese government ... I have no idea what evidence they have or what motives lie behind,” Chinese Foreign Ministry spokeswoman Jiang Yu (姜瑜) said.
The report highlighted what it said was “an obvious correlation to be drawn between the victims, the nature of the documents stolen, and the strategic interests of the Chinese state.”
Recovered files detailed India’s security situation in Assam, Manipur, Nagaland and Tripura states, India’s international relations with West Africa, Russia and the Middle East, and concerned Naxalite and Maoist “extremists.”
One file contained personal information on a member of India’s Directorate General of Military Intelligence. About 1,500 letters sent from the Dalai Lama’s office in 2009 were also recovered.
The researchers said the attacks would start with the opening of an attachment in an email seemingly sent by a familiar person, infecting computers.
The hackers would then misuse services such as Twitter, Google Groups, Blogspot and Yahoo Mail to send “new malicious binaries to compromised computers” ordering them to transfer documents to a “drop zone.”
The Canadian researchers traced the cyber-attacks to servers in Chengdu, China, but could not identify the culprits. Chengdu is home to the Chinese military’s technical reconnaissance bureaus tasked with signals intelligence collection.
Several infected computers were also found to be “checking in” with a server in nearby Chongqing, China, where organized crime groups reportedly operate online.
“We have no evidence in this report of the involvement of the People’s Republic of China or any other government in the Shadow network ... or that the attackers were directed in some manner — either by sub-contract or privateering — by agents of the Chinese state,” the report concluded.
“But an important question to be entertained is whether the PRC will take action to shut the Shadow network down,” the report said.
AIR SUPPORT: The Ministry of National Defense thanked the US for the delivery, adding that it was an indicator of the White House’s commitment to the Taiwan Relations Act Deputy Minister of National Defense Po Horng-huei (柏鴻輝) and Representative to the US Alexander Yui on Friday attended a delivery ceremony for the first of Taiwan’s long-awaited 66 F-16C/D Block 70 jets at a Lockheed Martin Corp factory in Greenville, South Carolina. “We are so proud to be the global home of the F-16 and to support Taiwan’s air defense capabilities,” US Representative William Timmons wrote on X, alongside a photograph of Taiwanese and US officials at the event. The F-16C/D Block 70 jets Taiwan ordered have the same capabilities as aircraft that had been upgraded to F-16Vs. The batch of Lockheed Martin
GRIDLOCK: The National Fire Agency’s Special Search and Rescue team is on standby to travel to the countries to help out with the rescue effort A powerful earthquake rocked Myanmar and neighboring Thailand yesterday, killing at least three people in Bangkok and burying dozens when a high-rise building under construction collapsed. Footage shared on social media from Myanmar’s second-largest city showed widespread destruction, raising fears that many were trapped under the rubble or killed. The magnitude 7.7 earthquake, with an epicenter near Mandalay in Myanmar, struck at midday and was followed by a strong magnitude 6.4 aftershock. The extent of death, injury and destruction — especially in Myanmar, which is embroiled in a civil war and where information is tightly controlled at the best of times —
China's military today said it began joint army, navy and rocket force exercises around Taiwan to "serve as a stern warning and powerful deterrent against Taiwanese independence," calling President William Lai (賴清德) a "parasite." The exercises come after Lai called Beijing a "foreign hostile force" last month. More than 10 Chinese military ships approached close to Taiwan's 24 nautical mile (44.4km) contiguous zone this morning and Taiwan sent its own warships to respond, two senior Taiwanese officials said. Taiwan has not yet detected any live fire by the Chinese military so far, one of the officials said. The drills took place after US Secretary
THUGGISH BEHAVIOR: Encouraging people to report independence supporters is another intimidation tactic that threatens cross-strait peace, the state department said China setting up an online system for reporting “Taiwanese independence” advocates is an “irresponsible and reprehensible” act, a US government spokesperson said on Friday. “China’s call for private individuals to report on alleged ‘persecution or suppression’ by supposed ‘Taiwan independence henchmen and accomplices’ is irresponsible and reprehensible,” an unnamed US Department of State spokesperson told the Central News Agency in an e-mail. The move is part of Beijing’s “intimidation campaign” against Taiwan and its supporters, and is “threatening free speech around the world, destabilizing the Indo-Pacific region, and deliberately eroding the cross-strait status quo,” the spokesperson said. The Chinese Communist Party’s “threats
RSS