[QODLink]
Americas
Global 'cyber spy' network revealed
Canadian team says China-based network hit governments and offices in 103 countries.
Last Modified: 30 Mar 2009 04:44 GMT
The Canadian team said the "GhostNet" system was armed with sophisticated spy tools [GALLO/GETTY]

A cyber spy network based almost entirely in China has hacked into computer networks around the world, stealing classified information from governments and private organisations in more than 100 countries, a team of Canadian researchers has reported.

The system, dubbed "GhostNet" by the researchers, infiltrated networks in dozens of embassies, foreign ministries, government departments and offices in several cities belonging to the Dalai Lama's Tibetan government-in-exile, the Canadian team said.

The network was uncovered after the Munk Centre for International Studies was initially approached by the Dalai Lama's office to investigate allegations of Chinese espionage.

In over 10 months of study, they then found a far larger spy network, targeting more than 1,295 infected computers in 103 countries.

'High-value targets'

According to one of the researchers, close to 30 per cent of the infected computers "are considered high-value political and economic targets".

'GhostNet'

Spy network based almost entirely in China, although it is not clear who is running it or for what purpose

 Network uses malicious software, or "malware" installed in remote computers, allowing hackers to retrieve files and information at will

 Software allows hackers to remotely switch on infected computers' webcams and microphones, enabling them to listen in on conversations

 Researchers say at least 1,295 computers in 103 countries were found to be infected

They include computers located at ministries of foreign affairs, embassies, international organisations, news media, and NGOs, Ronald Deibert, director of Munk's Citizen Lab, wrote in an email.

The study did not name specifically which governments had been targeted by the spy network, although the researchers said the system was focused on the governments of South and Southeast Asian nations.

They said they had seen no evidence that US government offices had been breached.

The researchers said the GhostNet system - which they described as still active - had been armed with a wide-ranging set of tools, including the ability to retrieve documents, and turn on web cameras and audio systems to act as remote listening posts.

The study found that the network was based almost exclusively in China, although the researchers stopped short of saying the Chinese government was involved in the system.

Easy to hide

"One of the characteristics of cyber-attacks of the sort we document here is the ease by which attribution can be obscured," Deibert said.

Chinese officials have denied the government is involved in cyber spying [GALLO/GETTY]
"Regardless of who or what is ultimately in control of GhostNet, it is the capabilities of exploitation, and the strategic intelligence that can be harvested from it, which matters most."

He said the study highlighted the growing capabilities of cyber attacks and the ease with which the internet can be used to gather high value and sensitive information.

Speaking to The New York Times, a spokesman for the Chinese Consulate in the city dismissed the idea China was involved.

"These are old stories and they are nonsense," Wenqi Gao, told the paper.

"The Chinese government is opposed to and strictly forbids any cybercrime."

Source:
Al Jazeera and agencies
Topics in this article
Country
Featured on Al Jazeera
Your chance to be an investigative journalist in Al Jazeera’s new interactive game.
An innovative rehabilitation programme offers Danish fighters in Syria an escape route and help without prosecution.
Street tension between radical Muslims and Holland's hard right rises, as Islamic State anxiety grows.
Take an immersive look at the challenges facing the war-torn country as US troops begin their withdrawal.
Featured
Private citizens take initiative to help 'irregular' migrants, accusing governments of excessive focus on security.
Indonesia's cassava plantations are being killed by mealybugs, and thousands of wasps will be released to stop them.
Violence in Ain al-Arab has prompted many Kurdish Syrians to flee to Turkey, but others are returning to battle ISIL.
Unelected representatives quietly iron out logistics of massive TPP and TTIP deals among US, Europe, and Asia-Pacific.
Led by students concerned for their future with 'nothing to lose', it remains to be seen who will blink first.