Status of Chinese People

About China and Chinese people's living condition

  • China Organ Harvesting Report, in 19 languages

  • Torture methods used by China police

  • Censorship

  • Massive protests & riots in China

  • Top 9 Posts (In 48 hours)

  • All Topics

  • Books to Read

    1. A China More Just, Gao Zhisheng
    2.Officially Sanctioned Crime in China, He Qinglian
    Will the Boat Sink the Water? Chen Guidi, Wu Chuntao
    Losing the New China, Ethan Gutmann
    Nine Commentaries on The Communist Party, the Epochtimes
  • Did you know

    Reporters Without Borders said in it’s 2005 special report titled “Xinhua: the world’s biggest propaganda agency”, that “Xinhua remains the voice of the sole party”, “particularly during the SARS epidemic, Xinhua has for last few months been putting out news reports embarrassing to the government, but they are designed to fool the international community, since they are not published in Chinese.”
  • RSS Feeds for Category

    Organ Harvesting

    Human Rights

    Made in China







    Feed address for any specific category is Category address followed by 'Feed/'.

  • Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 223 other followers

Suspected China spear-phishing attacks on Internet continue to hit Gmail users

Posted by Author on August 13, 2011

Computerworld – Months after Google said that Chinese hackers were targeting the Gmail accounts of senior U.S. government officials, attempts to hijack Gmail inboxes continue, a researcher said Thursday.

“Once compromises happen and are covered in the news, they do not disappear and attackers don’t give up or stop. They continue their business as usual,” said Mila Parkour, an independent security researcher based in Washington, D.C., on her Contagio Malware Dump website.
In early June, Google announced it had disrupted a targeted phishing campaign designed to compromise Gmail accounts belonging to senior U.S. and South Korean government officials, military personnel, Chinese activists and journalists. Google said it had traced the attacks to Jinan, China, a city in eastern China that has been linked to other hacking campaigns, including one in late 2009 against Google’s own network.

Parkour had revealed details of the earlier phishing attacks months before Google’s June announcement.

China denied accusations that its government played a role in the attacks that accessed hundreds of accounts.

And the attacks have not stopped.

“Attackers…continue their efforts with a very slight modifications to the original themes,” said Parkour.

The latest campaign baits the scam with the promise of a report titled “Blinded: The Decline of U.S. Earth Monitoring Capabilities and its Consequences for National Security” from the Center for a New American Security (CNAS), a Washington D.C. think tank.

In fact, CNAS offers that report as a free PDF download.

The emails are customized for each recipient, a common tactic in targeting attacks — dubbed “spear phishing” by security experts — and apparently are aimed at people associated with political and international affairs.

“Victims get a message from an address of a close associate or a collaborating organization/agency, which is spoofed,” said Parkour. “The message is crafted to look like a subscription form offering to enter Gmail credentials to activate it.”

Parkour also dredged up evidence of a Chinese connection to this newest campaign. She noted that the email client that sent the bogus messages was Foxmail, a free program routinely used by China-based phishing attacks, and that the server delivering the messages is based in Taiwan and has sent malicious mail before.

If a recipient falls for the trick and enters his or her Gmail username and password in the emailed form, the information is sent to the attackers via a compromised server in Houston, Texas. The criminals then use the pilfered credentials to log into the account a few hours later, and check the inbox twice each day after that.

Parkour confirmed many of the details herself by creating a Gmail account, populating it with Google alerts about human rights and military issues, as well as with malicious documents and messages from Chinese discussion groups.

“The password thieves did not delay and logged in less than two hours after the compromise,” she said.

Since June, Google has deployed some new anti-phishing features, including one that displays a message when email is forwarded to another address — as in this case — and another that automatically shows a sender’s address for mail coming from people the recipient has either not sent mail to or are not in his contact list.

“Google are aware of this, [but] there is not much they can do to prevent these from coming in,” said Parkour as she urged people concerned about security to use Gmail’s two-factor authentication, which sends a second password to the user’s mobile phone, and to change their primary password frequently.


Sorry, the comment form is closed at this time.

%d bloggers like this: