bnn.lv Latviski   bnn-news.com English   bnn-news.ru По-русски
Friday 19.01.2018 | Name days: Alnis, Andulis
LatviaLatvia

Chinese devices secretly send user data to servers in China

FaceBook
Twitter
Draugiem
print
(No Ratings Yet)

Baltic news, News from Latvia, BNN.LV, BNN-NEWS.COM, BNN-NEWS.RUAn American IT security company recently published shocking news about phones manufactured in China. Cheap and relatively reliable devices send sensitive user data to servers in China every three days. Data flow to China has also been noticed in Latvia recently.

CERT.LV has noticed connections to Chinese servers from eight state institutions networks. CERT.LV has identified multiple infected devices responsible for backdoor access leaks. Work is being done to determine what kind of information was leaked to the east, Nekā personīga programme of TV3 reports.

Since last week, Chinese phones are no longer popular in USA. IT security firm specialists have found that 50 dollar phones begin secretly transferring text messages, contact data and call records to servers in China after 72 hours of being active. Owners are not informed of this data leak and there is no way to turn it off.

BLU products are sold to twenty thousand clients. Their products are programmed by Chinese Shanghai Adups Technology, the same company that produced software for devices used by seven hundred million people. This includes e-cars and Huawei phones sold in Latvia.

The company explains that the spying function is intended for marketing purposes, so that mobile phone manufacturer can better study users’ habits. American authorities are currently looking into the matter, concerned that this incident may be hiding attempts by the Chinese government to spy on other countries.

After this incident in USA, Latvian IT security firm CERT began paying more attention to the situation in Latvia. Experts found that shady Chinese servers may have received information from phones owned by Latvian state officials.

«Having performed an inspection, we have noticed there have been several hundred connection cases from multiple Latvian state institutions to Chinese servers. It is too soon to say if those are the same phones, as their popularity in Latvia is not high at all. Perhaps this is because Latvian officials had procured devices elsewhere and then brought them to Latvia. Maybe this is related to installed applications we know nothing about,» – comments CERT.LV deputy manager Varis Teivans.

Experts have noticed that the devices that have been contacting servers in China are specifically phones. Several of them have been found and have been handed over to CERT. The organization does not reveal which institutions have experienced data leaks. There is also no information regarding the purpose behind gathering of user data. «This entire story involved a number of different companies engaged in marketing, quality improvements and software development. One of those companies maintains servers. We don’t know how this information will be used,» – said Teivans.

Phones are not the only device that can be used to spy on people. CERT as a state institution has noticed many surveillance cameras in which manufacturers included options for third party access. An unspecified state institution installed several hundred cameras. They were manufactured by Chinese company Milesight. It is a serious company with a presence on the American market.

CERT.LV regularly organizes CyberChess event for IT security experts. During this event, IT technology experts try to hack devices chosen by organizers. «We thought it would be interesting to do something with security cameras. It is a very acute topic. People often set them up in their homes and companies. So I decided to come up with ways to make experts interested in finding ways to hack them. I thought about adding an artificial loophole,» – said IT security expert Kirils Solovjovs.

As it turned, however, the manufacturer had already installed something of the sort. A number of security weaknesses had been found in the test camera. Skilled hackers could easily exploit them. Experts found at least five vulnerabilities – five different potential backdoor access points. At least two of them provided complete control over the device. Those vulnerabilities have been fixed since the last CyberChess event. However, it was hard to force the manufacturer to do it.

China manufactures the lion’s share of the world’s electronic devices and their components. It is one of the leaders in software development as well. This scandal with spy-phones is not the only one that suggests China’s attempts to gather user data by using devices. The Pentagon had reported earlier in October that Lenovo computers produced in China have built-in spying software.

Former secretary to the National Security Council and deputy chief of the Constitution Protection Bureau Gundars Zalkalns allows that the Chinese government may have ties to spying devices.

Experts are certain that Latvia is not a target for China’s spying efforts. It is more likely those devices had ended up in the country with no such intent. It is far more likely those devices are intended to be realized in other, much larger economies. Defence Ministry’s state secretary Janis Garisons is confident the IT security situation in the country’s government sector is not bad. The situation is, however, problematic for the private sector, where people often try to save money on anti-virus software or procure cheaper phones and tablets. This only puts them, their business partners and the country at risk.

Ref: 102.109.109.5789


Leave a reply

Lithuanian bishops: skipping fasting on February 16 this year is not a sin

In an unprecedented move, the Conference of Lithuanian Bishops, the governing body of the Lithuanian Catholic Church, said that meat dishes okay for the people of faith on February 16, which marks the 100-year anniversary of Lithuania's statehood and the Lent Friday, which is traditionally a day of fasting for religious Catholic people.

Coincidence? Votes from Harmony and UGF ensure Sudraba remains the head of Oligarchs case committee

On Thursday, 18 January, the majority of Saeima members voted against the proposal to dismiss Inguna Sudraba from the post of the head of parliamentary investigative committee in charge of the review of the infamous Oligarchs case.

Kaljulaid criticised over involvement of acclaimed, but unrestrained director in centennial reception

As Estonia readies for the presidential reception to honour the 100th anniversary of Estonia, its President Kersti Kaljulaid is being criticised in an open letter for trusting Tallinn’s NO99 theatre, whose director physically assaulted a female colleague.

22.1% of Latvia’s residents subjected to risk of poverty

In 2017, 425 thousand persons or 22.1 % of Latvia population were at risk of poverty in 2016 – 0.3 percentage points less than in 2015. Equivalent income of this part of the population were below 330 euros monthly.

LAAC: Latvia’s milk market can be sorted out by joining forces in exports

Latvian Association of Agricultural Cooperatives (LAAC) has received support and praise for the public discussion regarding rapid milk procurement price changes, which is something that has recently affected the majority of agricultural cooperatives. This has helped cooperatives band together in order to sort out the milk market. This idea came from the example set by grain producer cooperatives, which did the same thing fifteen years ago, as reported by the association’s representatives.

Forevers announces its decision to exit from Latvian Federation of Food Companies

Forevers meat processing company has decided to exit from Latvian Federation of Food Companies (LFFC). The contract between two parties will be terminated in January.

Saeima’s Oligarchs case investigative committee hastily approves final report

In spite of objections, grammatical errors, criticisms about lacking effort, as well as Inguna Sudraba’s unfit status to lead the committee, members decided to move the meeting from 11:00 to 08:00 and approve the final report in a rushed vote.

Removal of 1 and 2 euro cent coins from circulation suggested by Bank of Estonia

Estonian central bank is willing to follow the eurozone trend of limiting the circulation of euro 1-cent and 2-cent coins and in time to remove them entirely from circulation in the Baltic country.

Cert.lv: attacks on e-health system and LETA were likely ordered

Attacks on e-health system and LETA agency were likely ordered, said Cert.lv deputy manager Varis Teivāns in an interview to Rīta Panorāma programme of LTV.

As Catalan parliament reconvenes, it elects pro-independence speaker

The Catalan regional parliament has in its first sitting since its ousting and snap December election elected a separatist-minded politician as its Chairman, which indicates that the attempts to break the region away from Spain would continue.

Latvia’s National Armed forces receive new Harris tactical radio equipment

In 2017, Latvia received tactical military radios worth USD 10.5 million from American Harris Corporation. Procurement of radio equipment will further improve command function and help develop a lasting communication system with other NATO member states, as reported by Latvian Defence Ministry.

MEP: Europe continues strengthening its energy independence

«The European Parliament has voiced strong support towards Europe’s energy independence and moving its energy policy away from Russia’s monopoly by investing in energy efficiency and renewable energy resources,» said MEP Krišjānis Kariņš after the vote on Clean Energy Act’s first reading in Strasbourg.

Apple expected to pay additional 38 billion USD in taxes for money kept abroad

Motivated by the U.S. tax reform, Apple will pay about 38 billion U.S. dollars (31 billion euros) in tax on the roughly 250 billion dollars (204 billion euros) the computer technology firm keeps outside of its country of origin as it plans to focus more on its contribution to the American economy.

Latvian police commenced three criminal processes for contraband of drugs this year

In the first two weeks of 2018, State Revenue Service’s Customs Police commenced three criminal processes in regards to illegal drugs contraband in postal packages from Lithuania to Latvia.

Betsafe: To Latvia from the Heart has laughable chance of entering next Saeima

With declining ratings, Inguna Sudraba’s party To Latvia from The Heart has been left with laughable chances of entering the next Saeima, Betsafe bookmakers say.

EU Affairs Committee: EU Digital Single Market motivated Latvia to perform reforms

European Union’s Digital Single Market strategy offered new opportunities for Latvian businessmen to actively present their services in other member states. The strategy also served as an impulse for the business environment and state administration. The strategy motivates our government to walk the road of reformation more actively and clean up messes that have remained for a long time, said chairperson of Saeima’s European Affairs Committee Lolita Čigāne on Wednesday, 17 January.

Expert: Zhdanok’s decision to leave EP was carefully calculated to revive Latvian Russians Union

The decision made by member of the European Parliament (EP) and leader of Latvian Russians Union (LRU) Tatyana Zhdanok, in accordance with which she intends to leave the European Parliament to instead focus on LRU’s election campaign, was a carefully calculated step to reanimate the party, said dean of Social Sciences Faculty of the University of Latvia Juris Rozenvalds.

Maxima Latvia expects price decline up to 15% in 2018

Following Maxima Latvija’s decision to reduce prices for nearly 1,000 important goods, it is expected that a similar step will be made by other players in the industry. This could mean prices for everyday goods could decline by up to 15%, as BNN was informed by the company.

Latvia’s economy reaches highest peak since 2015

Residents’ mood has improved for most positions of the study. Residents were positive the most about ongoing changes for Latvia’s economy, the value of which has reached its peak since July 2015. In spite of optimistic changes, however, 30% of respondents are critical about ongoing economic changes in Latvia, according to results of the latest Baltic International Bank’s Latvian Barometer.

Riga exchange hopes for new securities issuers this year

There are hopes to see new Latvian businesses release shares on the stock market this year, says chairperson of Nasdaq Riga Daiga Auziņa-Melalksne.

Latvian universities to offer students an innovative grant system

To help develop students’ innovative and business abilities, Latvian Education and Science Ministry has developed a new student grant system, which will focus mainly on supporting innovative projects and research and further improve cooperation between universities and leading businesses to attract human resources, the ministry reports.

Russian sociologists fear closure, quit publishing election polls

Russian leading independent polling organisation Levada Center has stated it has quit releasing results of polls on the country’s spring presidential election citing concern that the authorities could close it down for what they see as meddling in politics.

Court maintains pledge on former LAR leader’s bank accounts and owned property

Court has applied pledge status on property and bank accounts owned by Riga City Council member Mārtiņš Bondars to enforce EUR 15 million from him as part of Latvijas Krajbanka criminal case, as reported by TV3 News.

McDonald’s to use unrecycled packaging for 7 more years

World’s largest catering chain McDonalds has set the aim of ensuring that by 2025 all its packaging would be from either from recycled or renewable materials, which would be an increase current proportion of a half.

Saeima speaker: Judicial Affairs Council’s work should be more apparent

Work performed by the Judicial Affairs Council should be made more apparent, said Saeima speaker Ināra Mūrniece during her meeting with Supreme Court chairman Ivars Bičkovičs.

Would you be ready to boycott something in your life?

View Results

Loading ... Loading ...

Polls Archive



Category feed: Feed: