bnn.lv Latviski   bnn-news.com English   bnn-news.ru По-русски
Saturday 19.08.2017 | Name days: Melānija, Imanta
LatviaLatvia

Chinese devices secretly send user data to servers in China

FaceBook
Twitter
Draugiem
print
(No Ratings Yet)

Baltic news, News from Latvia, BNN.LV, BNN-NEWS.COM, BNN-NEWS.RUAn American IT security company recently published shocking news about phones manufactured in China. Cheap and relatively reliable devices send sensitive user data to servers in China every three days. Data flow to China has also been noticed in Latvia recently.

CERT.LV has noticed connections to Chinese servers from eight state institutions networks. CERT.LV has identified multiple infected devices responsible for backdoor access leaks. Work is being done to determine what kind of information was leaked to the east, Nekā personīga programme of TV3 reports.

Since last week, Chinese phones are no longer popular in USA. IT security firm specialists have found that 50 dollar phones begin secretly transferring text messages, contact data and call records to servers in China after 72 hours of being active. Owners are not informed of this data leak and there is no way to turn it off.

BLU products are sold to twenty thousand clients. Their products are programmed by Chinese Shanghai Adups Technology, the same company that produced software for devices used by seven hundred million people. This includes e-cars and Huawei phones sold in Latvia.

The company explains that the spying function is intended for marketing purposes, so that mobile phone manufacturer can better study users’ habits. American authorities are currently looking into the matter, concerned that this incident may be hiding attempts by the Chinese government to spy on other countries.

After this incident in USA, Latvian IT security firm CERT began paying more attention to the situation in Latvia. Experts found that shady Chinese servers may have received information from phones owned by Latvian state officials.

«Having performed an inspection, we have noticed there have been several hundred connection cases from multiple Latvian state institutions to Chinese servers. It is too soon to say if those are the same phones, as their popularity in Latvia is not high at all. Perhaps this is because Latvian officials had procured devices elsewhere and then brought them to Latvia. Maybe this is related to installed applications we know nothing about,» – comments CERT.LV deputy manager Varis Teivans.

Experts have noticed that the devices that have been contacting servers in China are specifically phones. Several of them have been found and have been handed over to CERT. The organization does not reveal which institutions have experienced data leaks. There is also no information regarding the purpose behind gathering of user data. «This entire story involved a number of different companies engaged in marketing, quality improvements and software development. One of those companies maintains servers. We don’t know how this information will be used,» – said Teivans.

Phones are not the only device that can be used to spy on people. CERT as a state institution has noticed many surveillance cameras in which manufacturers included options for third party access. An unspecified state institution installed several hundred cameras. They were manufactured by Chinese company Milesight. It is a serious company with a presence on the American market.

CERT.LV regularly organizes CyberChess event for IT security experts. During this event, IT technology experts try to hack devices chosen by organizers. «We thought it would be interesting to do something with security cameras. It is a very acute topic. People often set them up in their homes and companies. So I decided to come up with ways to make experts interested in finding ways to hack them. I thought about adding an artificial loophole,» – said IT security expert Kirils Solovjovs.

As it turned, however, the manufacturer had already installed something of the sort. A number of security weaknesses had been found in the test camera. Skilled hackers could easily exploit them. Experts found at least five vulnerabilities – five different potential backdoor access points. At least two of them provided complete control over the device. Those vulnerabilities have been fixed since the last CyberChess event. However, it was hard to force the manufacturer to do it.

China manufactures the lion’s share of the world’s electronic devices and their components. It is one of the leaders in software development as well. This scandal with spy-phones is not the only one that suggests China’s attempts to gather user data by using devices. The Pentagon had reported earlier in October that Lenovo computers produced in China have built-in spying software.

Former secretary to the National Security Council and deputy chief of the Constitution Protection Bureau Gundars Zalkalns allows that the Chinese government may have ties to spying devices.

Experts are certain that Latvia is not a target for China’s spying efforts. It is more likely those devices had ended up in the country with no such intent. It is far more likely those devices are intended to be realized in other, much larger economies. Defence Ministry’s state secretary Janis Garisons is confident the IT security situation in the country’s government sector is not bad. The situation is, however, problematic for the private sector, where people often try to save money on anti-virus software or procure cheaper phones and tablets. This only puts them, their business partners and the country at risk.

Ref: 102.109.109.5789


Leave a reply

Kirsis asks police to assess possible forging of votes at Riga City Council

Riga City Council’s Unity faction chairman Vilnis Kirsis has asked State Police to check if the city council’s electronic voting system was used without another deputy’s knowledge or consent, said the politician.

Expert: attack in Spain shows how terrorists switched to more easily reachable targets

Terrorist attacks that transpired in Spain this week shows how terrorists have switched to more easily reachable targets, where security requirements are not as strict, says Latvian National Defence Academy’s Security and Strategic Research Centre researcher Martins Hirss.

New mandatory tests in schools to be introduced four years from now

In four years’ time – 2021/2022 school year – it is planned to introduce completely new mandatory tests in schools, as reported by State Education Content Centre Director Guntars Catlaks.

Nearly 9,000 children and their parents got homes thanks to state support programme

In the first half-year of 2017, state support helped 1,527 families in Latvia to buy homes. Compared with last year, families’ demand for state support has grown 6%, as reported by Altum finance institute.

Prediction: Aseradens will likely take control over Unity

Economy Minister Arvils Aseradens will become the head of Unity, Betsafe bookmakers predict. The possibility of Aseradens becoming the head of the party is given 45% probability by Betsafe.

Provisional estimate for next year’s fiscal space in Latvia is EUR 60 million

Next year’s fiscal space has been estimated at EUR 60 million, as noted by Finance Minister Dana Reizniece-Ozola, adding that a more precise estimate will be available at the end of August.

Reconstruction of Vilnius airport runway concludes; aircraft return to Vilnius

On Thursday, 17 August, Vilnius airport’s runway was festively opened. This was the most massive reconstruction for the airport in the past 20 years. It was a unique project for Lithuania and all of Europe, airport representatives say.

Islamic State terrorist group takes responsibility for Barcelona attack

The recent terrorist attack in Barcelona, in which a shuttle bus rammed a crowd of people on La Rambla, killing 13 and injuring at least 100, has become this week’s topic.

Weather in Latvia to be warm but rainy on weekends

The sun will appear every now and then between clouds on Friday, 18 August. Still, some rain is expected, especially in the afternoon in Latvia’s eastern regions, where thunderstorms may appear. Rain is expected to reach the capital in the afternoon. Wind will draw in from the south. Air temperature will reach +21° C… +26° C, according to State Environment, Geology and Meteorology Centre.

Latvia’s export growth was moderately rapid in the first six months of 2017

Compared with the same period of 2016, Latvia experienced a moderately rapid export growth in the first six months of 2017, according to data published by Eurostat on Thursday, 17 August.

Latvia’s annual inflation in July was one of the highest in Europe

Inflation indexes in Latvia and the UK both reached 2.6% in July, which is one of the highest indexes in the European Union, according to data published by Eurostat on Thursday, 17 August.

Kirsis withdraws his candidacy in favour of Aseradens

Riga City Council member Vilnis Kirsis has decided to withdraw his candidacy from the race to become chairman of Unity in favour of a different candidate – Economy Minister Arvils Aseradens.

Rinkevics expresses Latvia’s interest in maintaining political consultations with Palestine

On Thursday, 17 August, Latvia’s Foreign Affairs Minister Edgars Rinkevics met with the leader of Palestine’s diplomatic mission in Latvia, ambassador Taissir Al Adjouri, to discuss mutual relations between Latvia and Palestine and the peace process in the Middle East.

Putin grins to the world’s seven billionth baby, Lithuania wary of border incidents

Russian President Vladimir Putin paid a visit this Wednesday to Kaliningrad, the westernmost point of Russia, but the reports about his trip in the Russian enclave and over the border in Lithuania were strikingly different.

Survey: red considered the safest colour for a car

Most Latvian drivers consider red to be the safest colour for a car. The most popular, however, is black, according to results of a survey by Virši-A fuel trader.

airBaltic’s number of carried passengers reaches a record in second consecutive month

Latvian airBaltic airline carried 393,312 passengers in July 2017, which is 21% more than the same period last year. The number of passengers carried by airBaltic remains the highest it has ever been in the airline’s history, BNN was informed by the company.

Brivais vilnis: nearly all fish processing companies are experiencing losses

Currently nearly all fish processing companies in Latvia are experiencing major or minor losses, says Brivais vilnis chairman Arnols Babris.

American helicopters to perform low-altitude flights within Latvia’s airspace

U.S. Air Force Brigade’s Task Force Phoenix helicopters, which are stationed in Latvia as part of Atlantic Resolve operation, will be performing low-altitude flights from 16:00 to 18:00 from Lielvarde to Dobele on Friday, 18 August.

Healthcare Ministry’s state secretary Karlis Ketners may be replaced

Latvian Healthcare Ministry may replace its state secretary Karlis Ketners. It is possible he will be transferred to work at Finance Ministry, as reported by LTV.

Suspects in Europe's insecticide egg scandal before Dutch court

In the Netherlands, two men have been in court in relation to the scandal of eggs containing banned insecticide that has caused an EU-wide health scare and cost millions of euros of damages.

Indian national with fake documents apprehended on Latvian border

An Indian citizen travelling from Moscow on a bus was caught at Terehovo border control point in Latvia for presenting officers a fake EU family member’s resident card. No criminal process was launched. The person returned to the country he was travelling from.

Latvijas dzelzceļš will not have to pay dividends from last year’s profits

The government decided on Wednesday, 16 August, that Latvijas dzelzceļš will not have to pay dividends from last year’s profits, which were EUR 880,998.

Latvian citizenship provided to 103 people

The Cabinet of Ministers has issued an order to provide Latvian citizenship to 103 people through naturalization.

Estonian Inbank's profits reach EUR 5.7 million in six months

Estonian financial services' provided Inbank made a profit of 5.7 million euros in the first half of 2017, which is a 429.4% increase compared to the respective period in 2016.

Agriculture Ministry invites residents to sign up for measures to support fisheries

From 21 August onward, Rural Support Service plans to start accepting applications for projects to receive support from European Maritime and Fisheries Fund’s action plan for development of fisheries in 2014-2020 as part of projects Innovation, Productive Investments in Aquaculture and Fishing and Aquaculture project processing.

Newest comments