Mysterious Forces Hack Pro-Tibet, Save Darfur, Falun Gong Sites
March 26, 2008 10:15 AM
Who could be behind the wave of online attacks that have the internet community seeing red?
A series of online strikes has been carried out in the last few months on several high profile international targets. Among those targets are the Falun Gong and pro-Tibetan liberation organizations. Also targeted is the Save Dafur campaign.
As Sherlocke Holmes might say, "The game is afoot!"
Internet Storm Center
, an news organization focusing on online threats,
announced this week
, "On Friday we reported on targeted attacks against various pro-Tibet non-governmental organizations (NGO) and communities, as well as Falun Gong and the Uyghurs."
One technique that is being used to attack these organizations is a fake memo with a malicious attachment. This memo claims to have a human rights report about Tibet attached. Analysts state that the memo uses several key social engineering tricks to lull the readers into a false sense of security. Among these are the use of pertinent language in the memo and official looking numbers and titles.
Even trickier, the attachment is actually two files -- a legitimate flier for a real life book on the state of Tibet and a separate malicious trojan binary.
Eight types of trojans have been employed by the attackers, including the well known
attacks. While some machines are merely crippled, others are maintained and controlled through remote access using the
tool. The majority of control servers were
identified to be on Chinese netblocks
. However some originated from the U.S., South Korea and Taiwan.
Tibet has been under Chinese rule since military occupation in 1951. The Falun Gong claims its a spiritual organization focusing on meditation, boasting as many as 70 million members in China. The organization has been labelled as a cult by China. China regularly breaks up its public practices and jails its leaders.
The Save Darfur group has been under heavy attack from hackers. The FBI is currently investigating these attacks, which they say
may have a possible Chinese connection
. The Save Darfur campaign is a rather altruistic-spirited, nonprofit group whose well-intentioned goal is to bring attention to the ongoing genocide in western Darfur region of Sudan.
Allyn Brooks-LaSure, a spokesman with the group, says the group contacted the FBI after someone last week gained unauthorized access to its email and web servers. While Brooks-LaSure is certain the identity of the attackers, he did note that the IP addresses of the hackers were located in China. He states, "Someone in Beijing is trying to send us a message."
The hackers appeared to have focused primarily on gathering data on the group. Save Darfur has been trying to convince China to pressure Sudan, one of its largest trading partners, into stopping the bloodshed. Experts warn that while the attacks appear to have originated in China, they may merely have been routed through China.
Groups affiliated with the Save Darfur group have also been hit. Among the attacks they have noticed are emails with malicious attachments, very similar to those used against the Tibetan organizations. FBI Spokeswoman Debbie Weierman confirmed that the FBI was investigating, stating that they were "looking into the matter."
With the latest rash of attacks, one is left to wonder -- who might want to attack Save Darfur, pro-Tibetan liberation and the Falun Gong? Is this just an innocent set of unrelated attacks, or perhaps is it, along with other attacks in past months, the sign of a
growing online military campaign
"We basically took a look at this situation and said, this is bullshit." -- Newegg Chief Legal Officer Lee Cheng's take on patent troll Soverain
Cyber Tensions Flare Amongst U.S., Chinese Military
March 12, 2008, 5:28 PM
Chinese Hackers Take On the World with Ease
March 7, 2008, 7:26 PM
Science & Environment
February 20, 2017, 6:37 AM
The USA’s newest weather satellite sends first photos.
January 24, 2017, 6:41 AM
Netflix took a decision to invest in original content
January 19, 2017, 7:00 AM
Amazon Airborne Fulfillment Center – Your Merchandise Drop-Shipped from the Clouds
December 29, 2016, 5:00 AM
Amazon is experimenting with a new kind of grocery stores, Amazon Go
December 8, 2016, 5:00 AM
Google has developed Deep Learning Algorithm to detect Diabetic Eye Disease
December 4, 2016, 5:00 AM
Most Popular Articles
OnePlus 3T – 5.5” Optic AMOLED and Dash Charging Technology
March 23, 2017, 8:45 AM
Gigabyte GA-Z170X-Gaming G1 – Intel Thunderbolt 3 Certified Motherboard
March 9, 2017, 6:25 AM
Huawei P8 Lite 2017 – Android 7 Nougat Smartphone with Octa-Core Processor
March 8, 2017, 7:03 AM
Lenovo ThinkPad T460 - Ultra-Thin and Feather-light
March 3, 2017, 6:00 AM
Nokia has ditched this camera technology in its new smartphones
March 7, 2017, 8:45 AM
Latest Blog Posts
Android Creator and New Bezel-less Smartphone
Mar 29, 2017, 10:28 AM
More Apps From Google
Mar 28, 2017, 7:15 AM
Are you thinking of performance and speed? Intel claims:
Mar 25, 2017, 7:45 AM
Apple buys an automation app called Workflow. The deal was completed today and brings the app along with its developers.
Mar 23, 2017, 7:35 AM
Apple Announces new color for iPhones and iPads
Mar 22, 2017, 7:45 AM
Instagram: You Can Now Save Live Videos For Later
Mar 21, 2017, 7:49 AM
Samsung Galaxy S8 to Get New Color Scheme
Mar 20, 2017, 7:45 AM
What else to worry about?
Mar 17, 2017, 6:45 AM
Icon of the Day: Intel/ NVIDIA or Mobileye
Mar 16, 2017, 6:15 AM
JUST IN - Twitter Hijacked : High-Profile Account Accesses
Mar 15, 2017, 7:07 AM
Mar 14, 2017, 7:30 AM
News and Tips
Mar 13, 2017, 6:30 AM
iPhone 8 – May Not Get Curved Screen
Mar 11, 2017, 8:00 AM
California paves way to self-driving car tests without humans
Mar 11, 2017, 7:18 AM
Smart Machines V hackers
Mar 10, 2017, 7:00 AM
Uber Can Resume Autonomous Car Testing in California
Mar 9, 2017, 6:50 AM
Mar 8, 2017, 7:09 AM
Mar 7, 2017, 8:45 AM
World news 3-6
Mar 6, 2017, 5:40 AM
Mar 4, 2017, 7:40 AM
Mixed News of the Day
Mar 4, 2017, 6:32 AM
Jaguar Land Rover invests in ride-sharing
Mar 3, 2017, 7:00 AM
More Blog Posts
Copyright 2017 DailyTech LLC. -
Terms, Conditions & Privacy Information