Purple mountain observatory of the chinese academy of sciences, Research institute in Beijing, China

In a detailed report, Canada-based Citizen Lab at the University of Toronto revealed that the same group of hackers earlier targeted the Uyghur Muslim community in China.The researchers observed 15 intrusion attempts against individuals from the private office of the Dalai Lama, the Central Tibetan Administration, the Tibetan Parliament and Tibetan human rights groups in November 2018."On April 22 and May 21, 2019, we observed two additional attempts. The majority of people who were targeted hold senior positions in their respective organizations and the malicious links required only a single click on a mobile device to work," the report said on Tuesday.The Citizen Lab observed that the Chinese group named Poison Carp employed eight Android browser exploits and one Android spyware kit, as well as one iOS exploit chain and iOS spyware, to attack Tibetan groups."This campaign is the first documented case of one-click mobile exploits used to target Tibetan groups, and reflects an escalation in the sophistication of digital espionage threats targeting the community," said the research team."Beyond the technical overlap in these campaigns is the fact that they all targeted ethnic minority groups related to China: Uyghurs and Tibetans," they added.The Tibetan community has been besieged by digital espionage for over a decade.To address such challenges, Tibetan groups recently formed the Tibetan Computer Emergency Readiness Team (TibCERT), a coalition between Tibetan organisations to improve digital security through incident response collaboration and data sharing.In November 2018, TibCERT was notified of suspicious WhatsApp messages sent to senior members of Tibetan groups."With the consent of the targeted groups, TibCERT shared samples of these messages with Citizen Lab. Our analysis found that the messages included links designed to exploit and install spyware on iPhone and Android devices," said the researchers.On November 13, 2018, a senior staff member at a Tibetan human rights group was contacted on WhatsApp from a previously unknown number.The persona claimed to be "Jason Wu", head of the "Refugee Group" at Amnesty International's Hong Kong branch.There does not appear to be any "Jason Wu" currently employed by Amnesty International.Once the pretext was established, the operator shared a link shortened with bit.ly that redirected to a page that contained an iOS exploit.In another intrusion attempt, a staff member from the same Tibetan human rights organization was contacted by "Lucy Leung", a person masquerading as a New York Times reporter seeking an interview. The operator again shared a malicious link.The intrusion attempts arrived via WhatsApp messages from seven fake personas designed to appear as journalists, staff at international advocacy organisations, volunteers to Tibetan human rights groups, and tourists to India."The fake personas exclusively used WhatsApp phone numbers with Hong Kong country codes (+852)," said the report.The iOS exploit and spyware were earlier used in watering hole attacks reported by Google Project Zero.A Volexity report earlier this month also published details of an espionage campaign against Uyghurs that used compromised websites to infect targets with Android malware."The level of threat posed by Poison Carp and the linked campaigns are a game changer. These campaigns are the first documented cases of iOS exploits and spyware being used against these communities," the research noted.( With inputs from IANS )

Purple Mountain Observatory Of The Chinese Academy Of SciencesFOLLOW

Purple mountain observatory of the chinese academy of sciences, Latest News

Thousands of protestors on Saturday gathered here to mark the fifth anniversary of Umbrella Revolution. ...

Despite support from China and Saudi Arabia and a huge IMF loan that helped Pakistan to address its immediate economic crisis, the United Nations on Thursday said that the country is still in the midst of a crisis. ...

BRICS Foreign Ministers, meeting on the sidelines of the UNGA here, reiterated their strong condemnation of terrorism in all its forms and manifestations whenever, wherever and by whomsoever committed. ...

Invoking Mahatma Gandhi, China on Thursday pitched for concrete actions to march together with India while underlining the need for going "beyond the mode of differences management" and jointly making the "cake of cooperation even bigger". ...

Nepal's opposition has voiced concerns over the ruling Nepal Communist Party's two-day training programme on 'Xi Jinping Thought', conducted here by a 50-member team of the Communist Party of China. ...

Chinese State Councilor and Foreign Minister Wang Yi said that strengthened communication with India benefits the two countries as well as the world at large. ...

India cannot replicate China and Europe and has to invent a development path for itself, said External Affairs Minister S Jaishankar on Wednesday. ...

Sophisticated Chinese hackers posing as NGO workers, journalists and tourists to India have targeted senior members of Tibetan groups close to the Dalai Lama, installing spyware on iPhones and Android devices via malicious links in WhatsApp text exch ...