bnn.lv Latviski   bnn-news.com English   bnn-news.ru По-русски
Sunday 22.10.2017 | Name days: Irīda, Īrisa
LatviaLatvia

Chinese devices secretly send user data to servers in China

FaceBook
Twitter
Draugiem
print
(No Ratings Yet)

Baltic news, News from Latvia, BNN.LV, BNN-NEWS.COM, BNN-NEWS.RUAn American IT security company recently published shocking news about phones manufactured in China. Cheap and relatively reliable devices send sensitive user data to servers in China every three days. Data flow to China has also been noticed in Latvia recently.

CERT.LV has noticed connections to Chinese servers from eight state institutions networks. CERT.LV has identified multiple infected devices responsible for backdoor access leaks. Work is being done to determine what kind of information was leaked to the east, Nekā personīga programme of TV3 reports.

Since last week, Chinese phones are no longer popular in USA. IT security firm specialists have found that 50 dollar phones begin secretly transferring text messages, contact data and call records to servers in China after 72 hours of being active. Owners are not informed of this data leak and there is no way to turn it off.

BLU products are sold to twenty thousand clients. Their products are programmed by Chinese Shanghai Adups Technology, the same company that produced software for devices used by seven hundred million people. This includes e-cars and Huawei phones sold in Latvia.

The company explains that the spying function is intended for marketing purposes, so that mobile phone manufacturer can better study users’ habits. American authorities are currently looking into the matter, concerned that this incident may be hiding attempts by the Chinese government to spy on other countries.

After this incident in USA, Latvian IT security firm CERT began paying more attention to the situation in Latvia. Experts found that shady Chinese servers may have received information from phones owned by Latvian state officials.

«Having performed an inspection, we have noticed there have been several hundred connection cases from multiple Latvian state institutions to Chinese servers. It is too soon to say if those are the same phones, as their popularity in Latvia is not high at all. Perhaps this is because Latvian officials had procured devices elsewhere and then brought them to Latvia. Maybe this is related to installed applications we know nothing about,» – comments CERT.LV deputy manager Varis Teivans.

Experts have noticed that the devices that have been contacting servers in China are specifically phones. Several of them have been found and have been handed over to CERT. The organization does not reveal which institutions have experienced data leaks. There is also no information regarding the purpose behind gathering of user data. «This entire story involved a number of different companies engaged in marketing, quality improvements and software development. One of those companies maintains servers. We don’t know how this information will be used,» – said Teivans.

Phones are not the only device that can be used to spy on people. CERT as a state institution has noticed many surveillance cameras in which manufacturers included options for third party access. An unspecified state institution installed several hundred cameras. They were manufactured by Chinese company Milesight. It is a serious company with a presence on the American market.

CERT.LV regularly organizes CyberChess event for IT security experts. During this event, IT technology experts try to hack devices chosen by organizers. «We thought it would be interesting to do something with security cameras. It is a very acute topic. People often set them up in their homes and companies. So I decided to come up with ways to make experts interested in finding ways to hack them. I thought about adding an artificial loophole,» – said IT security expert Kirils Solovjovs.

As it turned, however, the manufacturer had already installed something of the sort. A number of security weaknesses had been found in the test camera. Skilled hackers could easily exploit them. Experts found at least five vulnerabilities – five different potential backdoor access points. At least two of them provided complete control over the device. Those vulnerabilities have been fixed since the last CyberChess event. However, it was hard to force the manufacturer to do it.

China manufactures the lion’s share of the world’s electronic devices and their components. It is one of the leaders in software development as well. This scandal with spy-phones is not the only one that suggests China’s attempts to gather user data by using devices. The Pentagon had reported earlier in October that Lenovo computers produced in China have built-in spying software.

Former secretary to the National Security Council and deputy chief of the Constitution Protection Bureau Gundars Zalkalns allows that the Chinese government may have ties to spying devices.

Experts are certain that Latvia is not a target for China’s spying efforts. It is more likely those devices had ended up in the country with no such intent. It is far more likely those devices are intended to be realized in other, much larger economies. Defence Ministry’s state secretary Janis Garisons is confident the IT security situation in the country’s government sector is not bad. The situation is, however, problematic for the private sector, where people often try to save money on anti-virus software or procure cheaper phones and tablets. This only puts them, their business partners and the country at risk.

Ref: 102.109.109.5789


Leave a reply

Professor: by taking money away from science, the state shoots itself in the foot

The matter regarding insufficient funding for science has recently become more topical in the public space. President of Latvian Academy of Sciences Ojārs Spārītis is rather critical of the situation: Latvia has lied to the European Union and European Commission about making sure that funding for science reaches 1.5% of GDP by 2020.

To prevent fraud, audit of MPC recipients to be performed in Latvia

Latvian Economy Ministry intends to perform an audit of mandatory procurement component recipients and use new regulations to combat fraudulent activities, as confirmed by Economy Minister Arvils Ašeradens.

Rail Baltic procurements to be processed using Electronic Procurements System

Following the changes to Latvian Republic’s Public Procurements Law, all new procurements for Rail Baltica administered by RB RAIL will be processed using a free electronic information system and its e-contest subsystem.

Estonian construction price index pushed up by wages

The construction price index in Estonia has in July-September of 2017 increased by 0.9% in comparison to second quarter this year and by 1.7% from July-September of 2016, Estonian statisticians have estimated.

Surplus of Latvia’s government budget reached 9.5 million euros in 2016

In 2016 general government budget surplus accounted for EUR 9.5 million or 0.04 % of the Gross Domestic Product, whereas general government consolidated gross debt amounted to EUR 10 091.6 million or 40.6 % of the GDP.

Latvia to invest EUR 5.9 million into formation of unified port network

Ports of Riga planning region and Kurzeme planning region have commenced an important tourism project. The goal of this project is creating a unified yacht port network in Latvia and Estonia with quality services that would allow developing sailing tourism and attract foreign sailing enthusiasts in the future, reports the regions’ representative Inese Ozoliņa.

Graft-suspected Tartu deputy mayors resign

In Estonia's second largest city, Tartu, Deputy Mayors Artjom Suvorov and Valvo Semilarski have stepped down from office, Estonian press reported, after the politicians were arrested under suspicion of graft.

Expert: workers of Latvia’s NGO sector have high ‘burnout’ risk

Workers of Latvia’s NGO sector have a high burnout risk, said once the director of Providus Dace Akule in an interview to Latvijas Radio.

Producer: many young people come to work in the film industry

Latvia’s film industry has been steadily growing these past several years, and it is especially gratifying that many young people are coming to work in the industry, says director and producer, representative of Film Angels Productions Jānis Kalējs.

Pollution blamed for every sixth premature death globally

Nine million premature deaths globally in 2015 are said to be related to pollution, a study has found pointing to presence of harmful matter in air, water and workplace as the three main risk factors.

Infectologist: influenza kills biologically the weakest, including children and pregnant women

Influenza is an infection that affects both children and adults. However, it kills those who are biologically weak, says Immunization State Council chairperson and infectologist of Children’s Vaccination Centre Dace Zavadska.

Investor activity made easier between Latvia and Vietnam

An intergovernmental agreement has been signed between the Republic of Latvia and Socialist Republic of Vietnam on prevention of double taxation and tax avoidance in relation to income tax.

Colder masses of air to enter Latvia in coming days; precipitation to be limited

Although high atmospheric pressure will be present above Latvia in the coming days, southern regions in Latvia will experience short-term precipitation on Saturday, 12 October, caused by the cyclone active above Poland. Colder masses of air will enter Latvia in the coming days.

Maltese journalist said to be killed by remotely-controlled explosive

Officials in Malta have unveiled it is assumed that investigative journalist Daphne Caruana Galizia was murdered by an explosive places under her car, which was detonated remotely.

Prime Minister: Latvia cannot accept additional asylum seekers

Latvia cannot afford to resettle additional asylum seekers, said Prime Minister Māris Kučinskis during his meeting with European Commission President Jean-Claude Juncker on Thursday, 19 October.

Scandinavians purchase tourism company in Lithuania; changes expected in Latvia too

Dutch Otravo online travel organization has expanded and has purchased Lithuanian online travel agency Interno Partneris, thereby entering the Baltic market.

Ombudsman: non-citizen status matter should be resolved in next decade

The next ten years may be the transition period to ‘put an end’ to the non-citizen status in Latvia, said ombudsman Juris Jansons in an interview to LTV programme Rīta panorama.

Swedish Foreign Minister: harassment exists at highest political level

The Foreign Affairs Minister of Sweden, Margot Wallström, has commended the current sexual assault and harassment awareness campaign in social media and urged to fellow politicians to address the problem.

Latvenergo recognized as Latvia’s most valuable company for tenth time

Latvenergo has been recognized as Latvia’s most valuable company in 2017. Its value grew 34% in comparison with 2016, according to the TOP 101 list of Latvia’s most valuable companies compiled by Prudentia and Nasdaq Riga.

Number of births and number of deaths decline in Latvia

During the first nine months of this year 15,723 babies were born in Latvia, which is 1,113 children fewer than in the corresponding period of the last year.

CC applies binding conditions for the sale of MTG Broadcasting AB

Latvian Competition Council has decided to permit Bite Lietuva to purchase MTG Broadcasting AB group’s businesses in Latvia. CC has applied several binding conditions to prevent a possible impact on competition on the television services and advertisement market.

Eesti Energia warns: Limiting CO2 emissions on capacity could endanger energy supply

Estonian energy giant Eesti Energia has evaluated that a plan under discussion in the European Union to introduce a carbon dioxide release limit for capacity mechanisms to qualify for subsidies could adversely affect the security of supply in Estonia and the Baltic states.

Solidarity tax norm recognized as non-compliant with Latvia’s Constitution

On Thursday, 19 October, the Constitutional Court of the Republic of Latvia declared the Solidarity tax norm as non-compliant with the country’s Constitution.

Survey: Riga residents go to the doctor’s the most often

34% of residents undergo regular health checks, according to Mana Aptieka & Apotheka health index. In addition, women are twice as serious about health checks as men.

LG cozies up with idea of rebuilding railway tracks to Reņģe, Latvia

Lithuania‘s Lietuvos Geležinkeliai has sent a mixed message as to what it intends to do next following an EC fine of nearly 28 million against it over the dismantling a 19-km railway stretch with the Latvian village of Rengė.