US Company: Evidence Found of Chinese Cyber Attacks on Cambodia

[geovalin]

An American company says it found evidence that a Chinese group attacked computers belonging to people and organizations in Cambodia.

 

U.S.-based security-research company FireEye reports one of the organizations targeted was Cambodia’s National Election Committee. It says the Chinese group also hacked computers belonging to Cambodia’s ministries of interior, foreign affairs and economics and finance.

 

In addition, FireEye says the hackers targeted a jailed opposition leader and his daughter, human rights activists, media organizations and two Cambodian diplomats overseas.

 

FireEye says it found that the targets were given corrupted computer files from an unsecured server operated by a hacking group called TEMP.Periscope.

 

Benjamin Read examined results of the investigation for FireEye. Read told the Associated Press (AP) the evidence suggested Chinese state involvement in the hacking. “They don’t go for credit card numbers or bank account numbers, they go for information that’s of use to a government,” he said.

 

“We expect this activity to provide the Chinese government with widespread visibility into Cambodian elections and government operations,” FireEye said in a statement.

 

Read added that the Chinese hackers used the same equipment and methods to target the Cambodian government as it has private companies. He said this suggests the Chinese government “doesn’t draw a line” between spying for political or business purposes.

 

In a statement, China’s foreign ministry said it did not have knowledge about TEMP.Periscope. It denied any involvement in hacking incidents.

 

Cambodians are preparing to vote in general elections on July 29. Rights groups have raised concerns about the fairness of the election process because of a series of actions by the government of Prime Minister Hun Sen.

Cambodian Prime Minister Hun Sen waves to supporters during his Cambodian People's Party's campaign in Phnom Penh, Cambodia, Saturday, July 7, 2018. (AP Photo/Heng Sinith)

Among the actions was a government ban on the country’s main opposition party and the jailing of its leader.

Cambodian officials accuse the National Rescue Party and its leader, Kem Sokha, of attempting to overthrow the government. But political observers and rights groups have said they believe the action was taken in an effort by Hun Sen’s government to stay in power.

 

Hun Sen has been a strong ally of China. He has ruled Cambodia for 33 years. FireEye did not provide specific evidence that TEMP.Periscope’s activities were providing support to Hun Sen’s ruling party before the elections.

 

One of the individuals targeted by the hackers was Monovithya Kem, a daughter of Kem Sokha. She told the Associated Press she repeatedly received emails that claimed to be from an activist working for a Cambodian non-profit group. The emails asked Monovithya Kem to open an attachment. FireEye said this was a trap, an attempt to gain control of her computer.

In this June 2, 2017, file photo, opposition party Cambodia National Rescue Party (CNRP) leader Kem Sokha greets his supporters at a rally in Phnom Penh. (AP Photo/Heng Sinith, File)

Monovithya Kem says she has been targeted by Cambodian hackers in the past. But she was shocked to learn that a Chinese group had attempted an attack this time.

 

“To know that a foreign group is specifically trying to get information from me - now that’s scary,” Kem told the AP from Washington, DC, where she is based. “What you’re dealing with is suddenly bigger,” she said.

 

FireEye says that in the past, it found evidence that TEMP.Periscope had sought maritime technology from businesses working on projects in the South China Sea.

 

The company said it expects the hacking group “to continue targeting a wide range of government and military agencies, international organizations, and private industry.”

I’m Bryan Lynn.

 

Bryan Lynn wrote this story for VOA Learning English, based on reports from the Associated Press and other sources. George Grow was the editor.

 

https://learningenglish.voanews.com/a/us-company-cites-evidence-of-chinese-cyber-attacks-on-cambodia/4486236.html

 

-- © Copyright VOA 18/07

 

[spidermike007]

The countries that spend the most on destructive hacking are Russia, China, North Korea and Iran. Not sure about the US. So, it comes as no surprise that the Chinese are using every advantage they can, to gain power and to earn money. That government cannot be trusted on any level. They are up to no good. 

[Srikcir]

5 hours ago, geovalin said:

“They don’t go for credit card numbers or bank account numbers, they go for information that’s of use to a government,” he said.

I'm somewhat surprise as Cambodia seems bought and paid for by China.

[phycokiller]

44 minutes ago, Srikcir said:

I'm somewhat surprise as Cambodia seems bought and paid for by China.

yes, hardly a surprize that hun sen and the chinese appear to be working together

[Ulic]

6 hours ago, spidermike007 said:

The countries that spend the most on destructive hacking are Russia, China, North Korea and Iran. Not sure about the US. So, it comes as no surprise that the Chinese are using every advantage they can, to gain power and to earn money. That government cannot be trusted on any level. They are up to no good. 

Seems a little naive. The US spends more on every weapons and defense system that anyone else and probably does it better than anyone else. Remember the American/Israeli Stuxnet attack on Iran. 

[Srikcir]

7 minutes ago, Ulic said:

Seems a little naive. The US spends more on every weapons and defense system that anyone else and probably does it better than anyone else. Remember the American/Israeli Stuxnet attack on Iran. 

According to Bob Mason, FX Empire in terms of who has the most advanced cyber warfare technology:

#1 US

#2 Israel

#3 China - Russia

#4 Iran - North Korea

https://www.nasdaq.com/article/so-who-has-the-most-advanced-cyber-warfare-technology-cm861979

According to 2017 U.N. Global Cyber Security rankings of 134 responding member nations:

  #1 Singapore

  #2 US

#10 Russia

#20 Israel

#32 China

#52 North Korea

#60 Iran

https://www.itu.int/dms_pub/itu-d/opb/str/D-STR-GCI.01-2017-PDF-E.pdf

It appears that cyber offense capability mostly doesn't proportionally balance cyber defense capability. 

[phycokiller]

16 hours ago, Srikcir said:

According to Bob Mason, FX Empire in terms of who has the most advanced cyber warfare technology:

#1 US

#2 Israel

#3 China - Russia

#4 Iran - North Korea

https://www.nasdaq.com/article/so-who-has-the-most-advanced-cyber-warfare-technology-cm861979

According to 2017 U.N. Global Cyber Security rankings of 134 responding member nations:

  #1 Singapore

  #2 US

#10 Russia

#20 Israel

#32 China

#52 North Korea

#60 Iran

https://www.itu.int/dms_pub/itu-d/opb/str/D-STR-GCI.01-2017-PDF-E.pdf

It appears that cyber offense capability mostly doesn't proportionally balance cyber defense capability. 

thats just countries, dont forget that any corporation, organisation or even individual can do any of this as well