bnn.lv Latviski   bnn-news.com English   bnn-news.ru По-русски
Sunday 26.02.2017 | Name days: Mētra, Evelīna, Aurēlija
LatviaLatvia

Chinese devices secretly send user data to servers in China

FaceBook
Twitter
Draugiem
print
(No Ratings Yet)

Baltic news, News from Latvia, BNN.LV, BNN-NEWS.COM, BNN-NEWS.RUAn American IT security company recently published shocking news about phones manufactured in China. Cheap and relatively reliable devices send sensitive user data to servers in China every three days. Data flow to China has also been noticed in Latvia recently.

CERT.LV has noticed connections to Chinese servers from eight state institutions networks. CERT.LV has identified multiple infected devices responsible for backdoor access leaks. Work is being done to determine what kind of information was leaked to the east, Nekā personīga programme of TV3 reports.

Since last week, Chinese phones are no longer popular in USA. IT security firm specialists have found that 50 dollar phones begin secretly transferring text messages, contact data and call records to servers in China after 72 hours of being active. Owners are not informed of this data leak and there is no way to turn it off.

BLU products are sold to twenty thousand clients. Their products are programmed by Chinese Shanghai Adups Technology, the same company that produced software for devices used by seven hundred million people. This includes e-cars and Huawei phones sold in Latvia.

The company explains that the spying function is intended for marketing purposes, so that mobile phone manufacturer can better study users’ habits. American authorities are currently looking into the matter, concerned that this incident may be hiding attempts by the Chinese government to spy on other countries.

After this incident in USA, Latvian IT security firm CERT began paying more attention to the situation in Latvia. Experts found that shady Chinese servers may have received information from phones owned by Latvian state officials.

«Having performed an inspection, we have noticed there have been several hundred connection cases from multiple Latvian state institutions to Chinese servers. It is too soon to say if those are the same phones, as their popularity in Latvia is not high at all. Perhaps this is because Latvian officials had procured devices elsewhere and then brought them to Latvia. Maybe this is related to installed applications we know nothing about,» – comments CERT.LV deputy manager Varis Teivans.

Experts have noticed that the devices that have been contacting servers in China are specifically phones. Several of them have been found and have been handed over to CERT. The organization does not reveal which institutions have experienced data leaks. There is also no information regarding the purpose behind gathering of user data. «This entire story involved a number of different companies engaged in marketing, quality improvements and software development. One of those companies maintains servers. We don’t know how this information will be used,» – said Teivans.

Phones are not the only device that can be used to spy on people. CERT as a state institution has noticed many surveillance cameras in which manufacturers included options for third party access. An unspecified state institution installed several hundred cameras. They were manufactured by Chinese company Milesight. It is a serious company with a presence on the American market.

CERT.LV regularly organizes CyberChess event for IT security experts. During this event, IT technology experts try to hack devices chosen by organizers. «We thought it would be interesting to do something with security cameras. It is a very acute topic. People often set them up in their homes and companies. So I decided to come up with ways to make experts interested in finding ways to hack them. I thought about adding an artificial loophole,» – said IT security expert Kirils Solovjovs.

As it turned, however, the manufacturer had already installed something of the sort. A number of security weaknesses had been found in the test camera. Skilled hackers could easily exploit them. Experts found at least five vulnerabilities – five different potential backdoor access points. At least two of them provided complete control over the device. Those vulnerabilities have been fixed since the last CyberChess event. However, it was hard to force the manufacturer to do it.

China manufactures the lion’s share of the world’s electronic devices and their components. It is one of the leaders in software development as well. This scandal with spy-phones is not the only one that suggests China’s attempts to gather user data by using devices. The Pentagon had reported earlier in October that Lenovo computers produced in China have built-in spying software.

Former secretary to the National Security Council and deputy chief of the Constitution Protection Bureau Gundars Zalkalns allows that the Chinese government may have ties to spying devices.

Experts are certain that Latvia is not a target for China’s spying efforts. It is more likely those devices had ended up in the country with no such intent. It is far more likely those devices are intended to be realized in other, much larger economies. Defence Ministry’s state secretary Janis Garisons is confident the IT security situation in the country’s government sector is not bad. The situation is, however, problematic for the private sector, where people often try to save money on anti-virus software or procure cheaper phones and tablets. This only puts them, their business partners and the country at risk.

Ref: 102.109.109.5789


Leave a reply

Week in Lithuania. Lithuanian PM, Conservative leader hold unannounced meeting

The Lithuanian branch of Finland's OP Corporate Bank announced it will lend 19.69 million euros to the city of Vilnius, with the money to be directed towards refinancing of the municipality's earlier loans.

BNN summary of the week: less pay for overtime and citizenship for all in Estonia

BNN offers a summary of this week’s topical news in a variety of categories, including change, business, decline, truth, growth and future.

State Audit: Healthcare Ministry had no right to reveal RAKUS audit results

State Audit criticizes Healthcare Ministry for revealing facts from an audit report, as it is prohibited to publish information before reports come into force.

Piebalgs: UGF’s popularity is critically low, which causes concerns

«The popularity of the management of the Union of Greens and Farmers is critically low. This causes serious concerns. If we truly want things to change, politicians have to be dynamic and prepared to think outside the usual categories,» says Unity chairman Andris Piebalgs.

SFRS: young people express increased interest in becoming fire fighters

Youngsters tend to express interest in becoming fire fighters, said Chief of State Fire and Rescue Service Oskars Abolins told Rīta panorama, adding that this can be explained with increased wages.

Ex-KNAB officials: there was no reason to end the «oligarchs case»

Former officials of the Corruption Prevention and Combating Bureau believe the prosecutor’s office and KNAB had no reasons to end the so-called oligarchs case. Nevertheless, they are not surprised about this outcome.

Infrastructure in Kraslava and Ludza to be developed using EU finances

Central Finance and Contracting Agency and councils of Kraslava and Ludza have signed an agreement for the realization of a project co-financed by the European Regional Development Fund to develop infrastructure in regions and contribute to attraction of private investors, CFLA reports.

Poland «cleans» its army leadership from Soviet Era servicemen

In the Polish Armed Forces, around 90% of its highest servicemen have been substituted, as the country’s Defence Ministry performs was changes in the Polish army.

Balta: poor weather conditions significantly affect road quality

«In the first two months of 2017, we have received 59 insurance claims to cover losses caused low-quality road surface and more than EUR 20,000 has been reserved for compensations,» as reported by Balta insurance association.

GSK Latvia board member appointed as chairman of Children's Clinical University Hospital

Valts Abols has been appointed as the head of Children's Clinical University Hospital. For the past 20 years he worked in managing posts of GlaxoSmithKline Latvia pharmaceutical company, as reported by Healthcare Ministry.

Estonia celebrates 99th anniversary since declaration of its independence

On February 24, it is Estonia’s Independence Day, which commemorates the time in February 1918, when a short period of foreign power vacuum was used to declare the establishment of the Republic of Estonia.

VNT recognised as the best employer in Kurzeme Region for the third time

On Thursday, 23 February, for the third year in row Ventspils nafta termināls received an award in the category Best Employer in Kurzeme Region presented by the online recruitment company CV-Online Latvia.

Welfare Ministry proposes reducing overtime pay

Latvian Welfare Ministry proposes reducing overtime pay for the first time two hours by half, says WM Egils Zarins.

Russia recognises its military involved in «intelligent, effective propaganda»

Russian Defence Ministry has recognised publicly for the first time the magnitude of its warfare effort, adding it has been significantly expanded in the post-Cold War period.

SRS urges residents to use return option for overpaid PIT

Next week, Latvian State Revenue Service will begin accepting income declarations for 2016 for the repayment of PIT. The list of justifiable expenses has been expanded this year, allowing residents to recover part of the money paid for child interest clubs, SRS reports.

Major Lithuanian cities’ mayors frown at Government’s refugee relocation plan

With the refugee centre in Rukla in central Lithuania full and tensions in the settlement simmering, the Lithuanian Government has come up with a plan to shut eventually down the centre, relocating its dwellers to Lithuanian municipalities.

Bosnia appeals against ICJ’s ruling on Serbia’s role in genocide

Bosnia and Herzegovina has officially appealed against the International Court of Justice’s ruling, which did not hold Serbia responsible for genocide against Bosniaks in the 1990s.

Meteorologists predict more snow in Latvia this week

Weather in Latvia will remain dictated by an active cyclone this week. Because of that, frequent bursts of precipitation are expected. Wind speed will be high and there is a risk of a blizzard, as reported by the State Environmental, Geology and Meteorology Centre.

HM: management of finances and resources has not been effective in Riga Eastern Hospital

«Insufficiently active management and unreasonable decisions made by the management of Riga Eastern Clinical University Hospital have significantly affected financial results of this healthcare institution,» believes Latvian Healthcare Ministry.

RPIVA representatives to demand Sadurskis’ resignation

On Tuesday, 28 February, Riga Teacher Training and Management Academy intends to organize a piquet outside of the Cabinet of Ministers building. The goal of this protest act is to demand the resignation of Latvian Education and Science Minister Karlis Sadurskis and halt the process of the academy’s liquidation.

Estonia with its start-up visas attracts specialists from Ukraine and India

In January 2017, Estonia introduced a special start-up visa programme, to which 50 specialists have applied, mostly from Ukraine, Belarus, Russia and India.

Survey: Latvian residents’ comprehension of life insurance is low

Only approximately every third Latvian resident is certain that life insurance should be necessary for people with large debts. This means residents’ overall understanding of the concept of life insurance is low, as stated in the survey performed by ERGO, DNB Bank and SKDS, comparing results with average indexes in other European countries.

Baldzens: Latvia’s education system is over-financed; teachers are not to blame

Teachers’ pay must not rely on how successfully the government and municipality handle school network’s reorganization, said the head of Free Trade Union Confederation of Latvia Egils Baldzens told Rīta panorama on Thursday, 23 February.

Two Riga Eastern Clinical University Hospital board members step down

Chairperson of Riga Eastern Clinical University Hospital Anita Slokenberga and board member Viestura Boka have stepped down from their posts.

Latvian Saeima ratifies EU-Canada Comprehensive Economic and Trade Agreement

On Thursday, 23 February, Latvia’s parliament ratified the EU-Canada Comprehensive Economic and Trade Agreement.

Newest comments