The Glade 4.0

"Turn the lights down, the party just got wilder."
It is currently Sun Nov 24, 2024 2:19 am

All times are UTC - 6 hours [ DST ]




Post new topic Reply to topic  [ 8 posts ] 
Author Message
PostPosted: Thu Jun 02, 2011 8:27 am 
Offline
User avatar

Joined: Thu Sep 03, 2009 11:05 am
Posts: 1111
Location: Phoenix
http://www.guardian.co.uk/technology/2011/jun/01/google-hacking-chinese-attack-gmail

Quote:
Tensions between the US, UK and China over the issue of cyber-attacks were set to escalate after it emerged that Chinese hackers have stolen the login details of hundreds of senior US and South Korean government officials as well as Chinese political activists.

Google said it had discovered and alerted hundreds of people who had been taken in by a carefully targeted "phishing" scam originating from Jinan, the capital of Shandong province. Hackers aimed to get complete control of users' email accounts on the Gmail system.

While there is no direct evidence that the hackers were in the pay of the Chinese government, the sophistication of the attacks and their highly targeted nature eliminates direct financial gain as a motive. Google did not rule out the possibility of the attack being state-sponsored.

The action could seriously heighten tensions over the issue of cyberwar. The US government moved this week to classify cyber-attacks as "acts of war", while the defence minister Nick Harvey said on Monday that "action in cyberspace will form part of the future battlefield".

At an international cybersecurity conference being held in London this week, delegates warned that new cyber-attacks were being developed so quickly that there should be a nonproliferation treaty over their creation and use.

Michael Rake of BT Group warned world powers were being drawn into a hi-tech arms race, with many already able to fight a war without firing a single shot.

"I don't think personally it's an exaggeration to say you can bring a state to its knees without any military action whatsoever," Rake said. He said it was "critical to try to move toward some sort of cyber technology non-proliferation treaty."

The Chinese government has repeatedly denied any involvement in hacking of foreign countries' systems.

The latest series of attacks appears to have been going on since February, according to a report referenced by Google. It said people using Google and Yahoo accounts were being targeted in a "spear phishing" campaign, in which emails crafted to be relevant only to the recipients are sent out with malware or fake links.

If the person opens the email or follows the links, they will be led to sites which will steal their email login details or silently redirect all their email to another address.

One example "spear phishing" email had the title "Fw: Draft US-China Joint Statement" and contained the text: "This is the latest version of State's joint statement. My understanding is that State put in placeholder econ language and am happy to have us fill in but in their rush to get a cleared version from the WH, they sent the attached to Mike."

"Google detected and has disrupted this campaign to take users' passwords and monitor their emails," a spokesman said. "We have notified victims and secured their accounts. In addition, we have notified relevant government authorities. We believe that this campaign to steal users' passwords originated from Jinan, China. We can't say for sure who is responsible."

Google said its own systems were not affected – a contrast with the situation at the end of 2009 when government-sanctioned Chinese hackers broke into the Google systems and are thought to have gained access to highly sensitive codes.

At the same time, Chinese hackers attempted, sometimes successfully, to break into US companies, including Morgan Stanley, and global oil companies.

China is believed to have gained a hugely valuable set of data about US military systems from a US Aries II signals intelligence aircraft that was forced to land on Hainan Island in April 2001 following a midair collision with a Chinese fighter jet.

The White House said it was investigating the claims made by Google.

"We're looking into these reports and are seeking to gather the facts," said spokesman Tommy Vietor. "We have no reason to believe that any US government email accounts were accessed."

FBI spokeswoman Jenny Shearer said: "We are aware of Google's announcement regarding attempts to obtain passwords and gain access to these accounts. We are working with Google to review this matter."


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Jun 02, 2011 11:29 am 
Offline
Home of the Whopper
User avatar

Joined: Thu Sep 03, 2009 8:51 am
Posts: 6098
Google is on its way to becoming a world power...awesome sauce.

_________________
"Therefore do not worry about tomorrow, for tomorrow will worry about itself. Each day has enough trouble of its own." Jesus of Nazareth


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Jun 02, 2011 11:30 am 
Offline

Joined: Thu Sep 03, 2009 10:03 am
Posts: 4922
Google has a market capitalization of $160 billion or so, last time I checked. The entire world, an economy of 7 billion people, has a market cap. of $50 trillion. That is an enormous percentage. They essentially are a world power.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Jun 02, 2011 11:34 am 
Offline
Grrr... Eat your oatmeal!!
User avatar

Joined: Wed Sep 02, 2009 11:07 pm
Posts: 5073
China is well on their way to make Joss' space cowboys a reality.

_________________
Darksiege
Traveller, Calé, Whisperer
Lead me not into temptation; for I know a shortcut


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Jun 02, 2011 2:34 pm 
Offline

Joined: Thu Sep 03, 2009 9:47 am
Posts: 324
Location: Knoxville, TN USA
If senior officials of the USA and South Korea are using Gmail accounts for anything sensitive, isn't that a problem in and of itself before we're even hearing about someone compromising said accounts?


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Jun 02, 2011 2:42 pm 
Offline
Manchurian Mod
User avatar

Joined: Fri Sep 04, 2009 9:40 am
Posts: 5866
It's entirely possible Google has better account security.

_________________
Buckle your pants or they might fall down.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Jun 02, 2011 3:10 pm 
Offline

Joined: Wed Sep 02, 2009 10:49 pm
Posts: 3455
Location: St. Louis, MO
Google does have better security. Unfortunately, they don't have more intelligent users. It doesn't take a lot of intelligence to not fall for a phishing attempt, but it does take more than average.

_________________
Image


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Jun 02, 2011 3:24 pm 
Offline
Manchurian Mod
User avatar

Joined: Fri Sep 04, 2009 9:40 am
Posts: 5866
I should clarify.

It's entirely possible that Google has better account security than whatever would be offered by the federal government.

_________________
Buckle your pants or they might fall down.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC - 6 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 302 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group