Sophisticated iPhone and Android malware is spying on Hong Kong protesters
Researchers say all signs point to the Chinese government
By Amar Toor
Oct 1 2014
<http://www.theverge.com/2014/10/1/6877377/sophisticated-iphone-and-android-malware-is-spying-on-hong-kong [1] >
A fake smartphone app is being used to remotely monitor pro-democracy protesters in Hong Kong, according to a report from the New York Times [2] . Researchers from Lacoon Mobile Security say the phishing scam is spreading across the messaging application WhatsApp, through texts that read: “Check out this Android app designed by Code4HK for the coordination of OCCUPY CENTRAL!â€, along with a link to download software. Lacoon says the software, once downloaded, can access a user’s personal data, including phone calls, text messages, and the physical location of their smartphone. Code4HK â€" a developer community that has helped to spread information about the protests â€" tells the Times it had nothing to do with the texts.
The origin of the scam remains unknown, but Lacoon CEO Michael Shaulov says the Chinese government is likely behind it, given the location of the servers and the sophistication of the operation. The company traced it to a computer that they say is similar to those that the Chinese government allegedly used to launch cyberattacks [3]  against US targets last year. The spread of the app remains equally unclear, though Shaulov says it was downloaded by one out of every ten phones that received the fake message, and, notably, that it has affected both Android and iOS users alike.
Phishing scam targets Android and iOS users alike
“This is the first time that we have seen such operationally sophisticated iOS malware operational, which is actually developed by a Chinese-speaking entity,†Shaulov told the Times.
Today’s report comes as thousands of protesters [4]  flocked to the streets on China’s National Day, calling for Beijing to allow for free democratic elections in 2017. China had previously said it would allow Hong Kong to choose its own leader by that date, but backtracked on that promise [5]  in August, when it announced that all candidates would have to be approved by Beijing.
Protesters in the “Occupy Central†movement have clashed with police since protests escalated over the weekend, and there are fears of further confrontation tonight, during National Day celebrations. The Chinese government has gone to great lengths to censor news of the demonstrations. Most state-run media have not mentioned it, and Chinese web censors have stepped up efforts [6]  to block images and videos on social media. On Sunday, the government blocke d access to Instagram [7]  within mainland China, and posts on the Twitter-like service Sina Weibo have been aggressively deleted [8] , according to the Times. In the past few days, censors have blocked any Weibo posts including the words “Hong Kong,†“barricades,†and “umbrella†â€" the unofficial symbol of Hong Kong’s movement.
Links
- ^ http://www.theverge.com/2014/10/1/6877377/sophisticated-iphone-and-android-malware-is-spying-on-hong-kong (www.theverge.com)
- ^ New York Times (www.nytimes.com)
- ^ launch cyberattacks (www.theverge.com)
- ^ thousands of protesters (uk.reuters.com)
- ^ backtracked on that promise (www.vox.com)
- ^ stepped up efforts (www.theverge.com)
- ^ blocked access to Instagram (www.theverge.com)
- ^ aggressively deleted (www.nytimes.com)
No comments:
Post a Comment