Durchgesickerte Dateien einer chinesischen Firma zeigen enorme internationale Hacking-Anstrengungen
by Grumpy-0ld-Man
Durchgesickerte Dateien einer chinesischen Firma zeigen enorme internationale Hacking-Anstrengungen
by Grumpy-0ld-Man
10 comments
The sinobot spin storm: This is our final warning not to make unfounded accusations about our hacking, besides it’s an internal matter that doesn’t really involve you, and even if it did everyone’s doing it too, so you deserve it and should apologize to us first for making us do it!
Can someone post a link not behind paywall please?
Whataboutism bots
The Chinese government issued a statement this morning: “Google’s servers are traditionally recognized Chinese territory with references to such dating back to the Qin Dynasty. As such we have every right to establish a presence there. These shortsighted accusations and half-truths are contrary to an appropriate understanding of world history and serve only to increase mistrust between nations.”
> The cache […] offers an unprecedented look inside the operations of one of the firms that Chinese government agencies hire for on-demand, mass data-collecting operations.
> The files […] detail contracts to extract foreign data over eight years and describe targets within at least 20 foreign governments and territories, including India, Hong Kong, Thailand, South Korea, the United Kingdom, Taiwan and Malaysia.
> The documents come from iSoon, also known as Auxun, a Chinese firm headquartered in Shanghai that sells third-party hacking and data-gathering services to Chinese government bureaus, security groups and state-owned enterprises.
> One spreadsheet listed 80 overseas targets that iSoon hackers appeared to have successfully breached. The haul included 95.2 gigabytes of immigration data from India and a 3 terabyte collection of call logs from South Korea’s LG U Plus telecom provider. The group also targeted other telecommunications firms in Hong Kong, Kazakhstan, Malaysia, Mongolia, Nepal and Taiwan.
> Among other targets were 10 Thai government agencies, including the country’s foreign ministry, intelligence agency and senate.
> The documents show that iSoon met and worked with members of APT41, a Chinese hacking group that was charged by the U.S. Justice Department in 2020 for targeting more than 100 video game firms, universities and other victims worldwide.
> ISoon has signed hundreds of deals with Chinese police that range from small jobs priced at $1,400 to multiyear contracts costing as much as $800,000, one spreadsheet showed.
> The company’s leaked product manuals describe the services they offer and their prices, and boast about being able to steal data without detection.
Looks like they did some today.
0.0
I’m so surprised! I never would have suspected the Chinese of stealing IP
inb4 Whataboutism from Chinese apologist bots
They have a law that means they can turn any company or citizen anywhere in the world into a spy to steal IP.
“A report by Mannheimer Swartling, a Sweden-based law firm, concluded that “NIL applies to all Chinese citizens” and that “NIL applies globally to Chinese Groups […] all subsidiaries, even those outside China […]”.”
“Experts argue that the law forces Chinese telecommunications companies with operations overseas such as Huawei to hand over data to Chinese government regardless of which country that data came from.”
“Article 7: All organizations and citizens shall support, assist, and cooperate with national intelligence efforts in accordance with law, and shall protect national intelligence work secrets they are aware of.
Article 10: As necessary for their work, national intelligence work institutions are to use the necessary means, tactics, and channels to carry out intelligence efforts, domestically and abroad.”
https://en.m.wikipedia.org/wiki/National_Intelligence_Law_of_the_People%27s_Republic_of_China#:~:text=The%20National%20People's%20Congress%20passed,updated%20on%2027%20April%202018.&text=A%20law%20enacted%20in%20accordance,safeguard%20national%20security%20and%20interests.
Well, here’s hard evidence. Can’t attack the source when the source is literally the guilty party themselves.