Cyber Attacks Launched Against Foreign Media In China
On Oct 1, the Communist Party celebrates 60 years of rule over mainland China. With a major parade scheduled, Beijing has tightened security ahead of the anniversary, with armed paramilitary troops at subway exits during rehearsals and neighborhood residents recruited to watch over the streets.
In advance of the event, and all too coincident, all-out cyber attacks have been launched against foreign media in China.
According Yahoo News, while spam and viral attacks are not uncommon, the latest wave is part of a pattern of increasingly sophisticated emails tailored to tempt foreign reporters, rights activists and other targets to open infected attachments.
“There is definitely a pattern of virus attacks in the run-up to important dates on the Chinese political calendar,” said Nicholas Bequelin of Human Rights Watch in Hong Kong. He noted that non-government organizations are also favorite targets.
“Whether the government is behind it, closes its eyes to it, supports it or has nothing to with it is unclear. There are also patriotic hackers, so there is no way to know for sure who is behind it.”
Reuters reported the following:
While poor English used to be a giveaway, new techniques include mimicking a known and trusted sender, or resending legitimate emails from activist organizations with a fake, malware-laden attachment.
The impersonating emails require more effort by the mystery senders but they are also more likely to be opened than easily identifiable, anonymous spam.
Chinese employees working for foreign news organizations in Beijing and Shanghai got identical emails on Monday, each with an attachment carrying malware meant to exploit Adobe Acrobat software, a common application used to read PDF files.
The email, which appeared to be from an economics editor named Pam Bouron, was a polite request for help lining up interviews during an upcoming visit to Beijing. It was tailored so that “Pam” appeared to work for each news organization.
The clue was that Reuters does not have an economics editor named Pam Bouron.
Others who received the “Pam Bouron” email include the Straits Times, Dow Jones, Agence France Presse, and Italian news agency Ansa.
Similar emails carrying viruses, also attacking foreign news agencies and non-government organizations, were common ahead of the Beijing Olympic Games last year.
This past March during the Tibetan demomstrations, researchers at Infowar Monitor in Canada also reported widespread cyber-infiltration of the Tibetan government in exile.
