An ambitious group of suspected state-backed hackers has been burrowing into telecoms to spy on high-profile targets across the world, a US cybersecurity firm said in a report published on Tuesday.
Boston-based Cybereason said the tactic gave hackers sweeping access to the targets’ call records, location data and device information — effectively turning the targets’ telecom against them.
Because customers were not directly targeted, they might never discover that their every movement was being monitored by a hostile power, Cybereason chief executive Lior Div said.
The hackers have turned the affected telecoms into “a global surveillance system,” Div said in a telephone interview. “Those individuals don’t know they were hacked — because they weren’t.”
Div, who presented his findings at the Cyber Week conference in Tel Aviv, Israel, provided scant details about who was targeted in the hack.
Cybereason had been called in to help an unidentified telecom last year and discovered that the hackers had broken into the firm’s billing server, where call records are logged, he said.
The hackers were using their access to extract the data of “around 20” customers, Div said.
Who those people were he declined to say, describing them as mainly coming from the worlds of politics and the military.
He said the information was so sensitive that he would not provide even the vaguest idea of where they or the telecom were located.
“I’m not even going to share the continent,” he said.
Cybereason said the compromise of its customer eventually led it to about 10 other firms that had been hit in a similar way, with hackers stealing data in 100 gigabyte chunks.
Div said that, in some cases, the hackers even appeared to be tracking non-phone devices, such as vehicles or smartwatches.
Cybereason said that it was in the process of briefing some of the world’s largest telecoms on the development.
The GSM Association, a group that represents mobile operators worldwide, said in an e-mail that it was monitoring the situation.
Who might be behind such hacking campaigns is often a fraught question in a world full of digital false flags.
Cybereason said all the signs pointed to APT10 — the nickname often applied to a notorious cyberespionage group that US authorities and digital security experts have tied to the Chinese government, but Div said that the clues they found were so obvious that he and his team sometimes wondered whether they might have been left on purpose.
“I thought: ‘Hey, just a second, maybe it’s somebody who wants to blame APT10,’” he said.
Chinese authorities routinely deny responsibility for hacking operations. The Chinese embassy in London did not immediately return a request seeking comment.
Div said that it was unclear whether the ultimate targets of the espionage operation were warned, saying that Cybereason had left it to the telecom to notify its customers.
Div added that he had been in touch with “a handful” of law enforcement agencies about the matter, although he did not say which ones.
NATIONAL SECURITY: The Chinese influencer shared multiple videos on social media in which she claimed Taiwan is a part of China and supported its annexation Freedom of speech does not allow comments by Chinese residents in Taiwan that compromise national security or social stability, the nation’s top officials said yesterday, after the National Immigration Agency (NIA) revoked the residency permit of a Chinese influencer who published videos advocating China annexing Taiwan by force. Taiwan welcomes all foreigners to settle here and make families so long as they “love the land and people of Taiwan,” Premier Cho Jung-tai (卓榮泰) told lawmakers during a plenary session at the Legislative Yuan in Taipei. The public power of the government must be asserted when necessary and the Ministry of
CROSSED A LINE: While entertainers working in China have made pro-China statements before, this time it seriously affected the nation’s security and interests, a source said The Mainland Affairs Council (MAC) late on Saturday night condemned the comments of Taiwanese entertainers who reposted Chinese statements denigrating Taiwan’s sovereignty. The nation’s cross-strait affairs authority issued the statement after several Taiwanese entertainers, including Patty Hou (侯佩岑), Ouyang Nana (歐陽娜娜) and Michelle Chen (陳妍希), on Friday and Saturday shared on their respective Sina Weibo (微博) accounts a post by state broadcaster China Central Television. The post showed an image of a map of Taiwan along with the five stars of the Chinese flag, and the message: “Taiwan is never a country. It never was and never will be.” The post followed remarks
Proposed amendments would forbid the use of all personal electronic devices during school hours in high schools and below, starting from the next school year in August, the Ministry of Education said on Monday. The Regulations on the Use of Mobile Devices at Educational Facilities up to High Schools (高級中等以下學校校園行動載具使用原則) state that mobile devices — defined as mobile phones, laptops, tablets, smartwatches or other wearables — should be turned off at school. The changes would stipulate that use of such devices during class is forbidden, and the devices should be handed to a teacher or the school for safekeeping. The amendments also say
CONSISTENT COMMITMENT: The American Institute in Taiwan director said that the US would expand investment and trade relationships to make both nations more prosperous The US would not abandon its commitment to Taiwan, and would make Taiwan safer, stronger and more prosperous, American Institute in Taiwan Director Raymond Greene said. “The US’ commitment to Taiwan has been consistent over many administrations and over many years, and we will not abandon our commitment to Taiwan, including our opposition to any attempt to use force or coercion to change Taiwan’s status,” he said in an exclusive interview with the Liberty Times (the sister newspaper of the Taipei Times) on Friday last week, which was published in the Chinese-language newspaper yesterday. The US would double down on its efforts