GhostNet

TwitterFacebook
Get flash to fully experience Pearltrees
http://www.thetechherald.com/articles/GhostNet-Researchers-discover-evidence-of-widespread-espionage-network/5142/

GhostNet: Researchers discover evidence of widespread espionage network - Security

Researchers discover a widespread espionage network dubbed GhostNet. (IMG: Ghost in the Shell wallpaper) On Sunday, researchers from the Information Warfare Monitor project, based out of Canada at the University of Toronto, released a paper investigating the claims of Chinese spying campaigns against the Tibetan government-in-exile and others.

GhostNet - F-Secure Weblog : News from the Lab

But the real news is that Greg Walton & co actually managed to get an inside view of some of the servers used in these spying attacks. This means they got to see what was being done with the infected machines and where in the world they were . Click the image above to read John Markoff's article. The release of the paper was synchronized with the New York Times article. University of Cambridge released a related research paper at the same time as well. http://www.f-secure.com/weblog/archives/00001637.html

Tracking GhostNet: Investigating a Cyber Espionage Network

http://www.scribd.com/doc/13731776/Tracking-GhostNet-Investigating-a-Cyber-Espionage-Network Acknowledgements This investigation was prepared by a dedicated team o proessionals. Greg Walton conducted and coordinated the primary eld-based research in India, Tibetan Missions abroad, and Europe.
Researchers in Toronto have released a document that describes what may be the first real evidence of a government-operated cyber-espionage network in action. In a ten-month investigation, the team documented the operation of what they dubbed GhostNet, and its various worldwide infection. The existence and operation of massive, coordinated, government-affiliated online espionage networks is typically the province of television or the silver screen, rather than the subject of research. In the real world, even a direct link between online and offline action (Russia’s invasion of Georgia and the simultaneous online attacks against that country are a good example) is not enough to automatically prove that the government behind the one is automatically behind the other. This is almost like we’ll undoubtedly see more of this type of crowd sourced aggression in the future.

China’s GhostNet | DarkGovernment

http://www.darkgovernment.com/news/chinas-ghostnet/
C'est la plus grande opération de cyberespionnage jamais découverte : une étude canadienne révèle que des ordinateurs basés en Chine ont pénétré et volé des documents dans des centaines d'ordinateurs de services gouvernementaux ou privés à travers le monde. Y compris, précise le New York Times qui a rendu publique cette étude , les machines des partisans du dalaï lama , le chef spirituel tibétain en exil en Inde ! Selon ce rapport publié par le Munk Centre for International Studies de l'Université de Toronto, tous les ordinateurs ayant participé à cette vaste opération de cyberespionnage sont basés en Chine, mais cela n'implique « pas nécessairement » la responsabilité du gouvernement chinois : il pourrait s'agir d'une « initiative privée » ou de « hackers patriotiques » . Voire même, c'est techniquement possible mais politiquement peu probable, d'un service étranger utilisant des oridnateurs basés en Chine.

"GhostNet" : vaste réseau de cyberespionnage basé en Chine | Rue89

http://www.rue89.com/chinatown/2009/03/29/ghostnet-vaste-reseau-de-cyberespionnage-base-en-chine

GhostNet & Creating a Culture of User Security | OpenConcept Consulting Inc.

Quick update, OpenOffice now ships with macro security set for 'High' so that "Only signed macros from trusted sources are allowed to run. Unsigned macros are disabled". By going to Tools -> Options -> OpenOffice.org -> Security -> Macro Security You can also set the security level to 'Very High' so that "Only Macros from trusted file locations are allowed to run. All other macros, regardless whether signed or not, are disabled." So if you are concerned with these articles, use OpenOffice. Listening to CBC's Search Engine Podcast (which was removed by CBC sadly) I was reminded again of how much our perceptions of security have changed and how much organizations and activists need to do to be mindful of the people they are working to support. http://openconcept.ca/blog/mgifford/ghostnet_culture_user_security
http://news.bbc.co.uk/2/hi/7970471.stm

BBC NEWS | Americas | Major cyber spy network uncovered

There is no conclusive evidence of Chinese government involvement An electronic spy network, based mainly in China, has infiltrated computers from government offices around the world, Canadian researchers say. The report, Tracking GhostNet: Investigating a Cyber Espionage Network, comes after a 10-month investigation by the Information Warfare Monitor (IWM), which comprises researchers from Ottawa-based think tank SecDev Group and the University of Toronto's Munk Centre for International Studies. They were acting on a request from the Tibetan spiritual leader's office to check whether the computers of his Tibetan exile network had been infiltrated. Researchers found that ministries of foreign affairs of Iran, Bangladesh, Latvia, Indonesia, Philippines, Brunei, Barbados and Bhutan appear to had been targeted.