Canadian researchers uncover vast computer spying operation

sweetspot

By The Canadian Press


4 M1 M% o9 f% [/ l0 {# T# x8 qTORONTO - A cyber spy network based mainly in China has tapped into classified documents from government and private organizations in 103 countries, including the computers of Tibetan exiles, Canadian researchers said Saturday.

The work of the Information Warfare Monitor initially focused on allegations of Chinese cyber espionage against the Tibetan community in exile, especially the Dalai Lama, who is frequently denounced by Chinese officials.

The research eventually led to a much wider network of compromised machines, the Internet-based research group said.

Information Warfare Monitor is a joint effort of the SecDev Group in Ottawa and the Citizen Lab at the University of Toronto.

The group said in a news release Sunday that investigators conducted field research in India, Europe and North America, including in the private office of the Dalai Lama, the Tibetan government-in-exile and several Tibetan NGOs.
: Q: \! l2 ?8 ]5 c
. `# Z0 E0 p5 S, f& I7 WInvestigator Greg Walton said: "We uncovered real-time evidence of malware that had penetrated Tibetan computer systems, extracting sensitive documents from the private office of the Dalai Lama."
5 ], H  S0 q" |; J1 P3 A, p5 H0 u& G
# |* S: ^) d2 |8 hDuring the second phase of the investigation, the data led to the discovery of insecure, web-based interfaces to four control servers. The interfaces allow attackers to send instructions to and receive data from compromised computers.
. v0 g1 V, V+ `) y6 `
4 K% @3 I; ~; b* k& }0 x1 ^! y6 s"What we found is not so much unprecedented in scope and sophistication," said Nart Villeneuve, a senior IWM analyst.

"But the relatively small size of the network and concentration of high-value targets is significant. It does not fit the profile for a typical cyber crime network."

. i" {6 a  J( \, R# GPrincipal investigators Ron Deibert and Rafal Rohozinski said: "This report serves as a wake-up call."

* s" }# h8 X% M4 h"At the very least, the large percentage of high-value targets compromised by this network demonstrates the relative ease with which a technically unsophisticated approach can quickly be harnessed to create a very effective spynet."
  n7 d; i% S8 T2 A( X9 m7 v
. m# _' O* r5 G4 r9 [2 yThe compromised computers included, among many others, the ministry of foreign affairs of Iran; the embassies of India, South Korea, Indonesia, Thailand, Taiwan, Portugal, Germany and Pakistan; the ASEAN Secretariat; the Asian Development Bank; news organizations and an unclassified computer located at NATO headquarters.

- x5 q+ D/ j3 l2 WThe research group said while its analysis points to China as the main source of the network, it has not conclusively been able to detect the exact identity or motivation of the hackers.

& {2 |7 R2 G! ^! B/ PA spokesman for the Chinese Consulate in New York dismissed the idea that China was involved.

2 t0 u9 m3 }5 X3 E- VThe researchers said they have notified international law-enforcement agencies of the spying operation.
  h5 Z0 N4 s9 p+ K5 [
The F.B.I. declined comment on the operation.

; }# {. U- H: EThe full report of the investigation entitled, "Tracking GhostNet: Investigating a Cyber Espionage Network," was released online Sunday.

雲吞

blood mouth spray people!

翠花

中国外交部发言人秦刚：关于所谓在中国的“电脑间谍系统”问题，我以前就讲过，中国政府一贯重视电脑网络安全，坚决反对并严厉打击包括“黑客”行为在内的任何破坏互联网、电脑网络系统的犯罪行为。中国的相关法律法规对此有明确规定。现在的问题是，国外一些人热衷于捏造所谓中国网络间谍的谣言，其说法完全是无中生有。这些人利用谣言抹黑中国的企图决不会得逞。

billzhao

今天早晨听cbc，也这么讲的。
8 L5 y; @) M, D6 F4 p# L' s间谍哪个国家没有？正常

icing

What a bloody lie !!!

sweetspot

They said conficker is from China too.

sweetspot

澳洲反华情绪高涨 陆克文被斥北京走狗
7 U2 ~( b; ~3 I. s1 J  ]- N
. }8 t) i* e$ }7 S$ J, j' [澳洲的反华情绪突然升高，“中国通”总理陆克文更成为反对派攻击的对象，被斥为“北京的走狗”，只会奉承中国。政府官员则指责反对激发“黄祸”恐慌。风波若恶化，可能对中澳之间总值达数以十亿美元计的双边贸易，构成严重威胁。

　　《星岛日报》报道，中澳关系出现变化，除了因为上周爆发的间谍疑云外，最新的事态发展是陆克文在伦敦准备出席二十国集团（G20）高峰会议期间，公开提出让中国在国际货币基金会（IMF）担当一个更大的角色。澳洲国内的反对党派实时作出强烈反应，在野保守派领袖特恩布尔公开怒斥陆克文，指他已经沦为“中华人民共和国的巡回大使”。

$ M' {7 y& Z) H; I+ ]　　澳洲国防部长菲茨吉本上周被揭发与女华商刘海燕过往甚密，接受刘海燕招待他免费旅游，却没有向政府申报，掀起一幕间谍疑云。事件愈闹愈大，甚至有人要求菲茨吉本引咎辞职。
) k  H* E2 h  ?: `
6 C6 b; W0 f2 E　　此外，精通普通话的陆克文曾经与中国公安部长周永康及XX政治局常委李长春进行秘密会谈，同样受到抨击。多个反对党派直斥他是“走狗”，又讥讽他奉承中国。畅销的《每日电讯报》周一刊登一幅漫画，描绘陆克文在伦敦一间唐餐馆内吃云吞面，但有大批间谍和军方首长秘密偷听他说话。

　　这场骂战进一步升级，轮到各个反对党派遭受攻击。财长坦纳公开点名批评特恩布尔蓄意挑起国内的反华情绪，重新引发“黄祸”恐慌。“黄祸”是二十世纪常用的种族主义字眼，其时许多澳洲人担心华人垂涎他们的辽阔土地，意图侵占他们的国家。特恩布尔周一早上接受传媒访问时作出反击，指坦纳回避了国家安全的核心问题。他谓：“坦纳的言论使人以为，中国要甚么，我们都应该奉承。”