Sunday, March 29, 2009

Canadian researchers uncover vast Chinese cyber spy network

Source: National Post

A 10-month investigation by a team of researchers at the University of Toronto uncovered a broad Chinese espionage scheme that reached into foreign embassies, news services and even the office of the Dalai Lama.

The researchers says the system - called GhostNet - sent e-mails that introduced malware into host computers, which in turn fed information back to servers located on the Chinese mainland.

"The GhostNet system directs infected computers to download a Trojan (horse) known as ghOst RAT that allows attackers to gain complete, real-time control," the authors write in Tracking GhostNet: Investigating a Cyber Espionage Network.

"Our investigation reveals that GhostNet is capable of taking full control of infected computers, including searching and downloading specific files, and covertly operating attached devices, including microphones and web cameras."

What began as a case study of allegations of Chinese spying, centering on Tibetan institutions, turned up a network of nearly 1,300 "infected hosts" in 103 countries, including the Dalai Lama's private office and the Tibetan Government in Exile.

How is it China can censor anything we do but we can't figure out what they're up to?

Nice research guys, now Toronto will be the second target after the Dalai Lama's office!

No comments: