bnn.lv Latviski   bnn-news.com English   bnn-news.ru По-русски
Ceturtdiena 20.09.2018 | Name days: Marianna, Ginters, Guntra
LatviaLatvia

Chinese devices secretly send user data to servers in China

FaceBook
Twitter
Draugiem
print
(No Ratings Yet)

Baltic news, News from Latvia, BNN.LV, BNN-NEWS.COM, BNN-NEWS.RUAn American IT security company recently published shocking news about phones manufactured in China. Cheap and relatively reliable devices send sensitive user data to servers in China every three days. Data flow to China has also been noticed in Latvia recently.

CERT.LV has noticed connections to Chinese servers from eight state institutions networks. CERT.LV has identified multiple infected devices responsible for backdoor access leaks. Work is being done to determine what kind of information was leaked to the east, Nekā personīga programme of TV3 reports.

Since last week, Chinese phones are no longer popular in USA. IT security firm specialists have found that 50 dollar phones begin secretly transferring text messages, contact data and call records to servers in China after 72 hours of being active. Owners are not informed of this data leak and there is no way to turn it off.

BLU products are sold to twenty thousand clients. Their products are programmed by Chinese Shanghai Adups Technology, the same company that produced software for devices used by seven hundred million people. This includes e-cars and Huawei phones sold in Latvia.

The company explains that the spying function is intended for marketing purposes, so that mobile phone manufacturer can better study users’ habits. American authorities are currently looking into the matter, concerned that this incident may be hiding attempts by the Chinese government to spy on other countries.

After this incident in USA, Latvian IT security firm CERT began paying more attention to the situation in Latvia. Experts found that shady Chinese servers may have received information from phones owned by Latvian state officials.

«Having performed an inspection, we have noticed there have been several hundred connection cases from multiple Latvian state institutions to Chinese servers. It is too soon to say if those are the same phones, as their popularity in Latvia is not high at all. Perhaps this is because Latvian officials had procured devices elsewhere and then brought them to Latvia. Maybe this is related to installed applications we know nothing about,» – comments CERT.LV deputy manager Varis Teivans.

Experts have noticed that the devices that have been contacting servers in China are specifically phones. Several of them have been found and have been handed over to CERT. The organization does not reveal which institutions have experienced data leaks. There is also no information regarding the purpose behind gathering of user data. «This entire story involved a number of different companies engaged in marketing, quality improvements and software development. One of those companies maintains servers. We don’t know how this information will be used,» – said Teivans.

Phones are not the only device that can be used to spy on people. CERT as a state institution has noticed many surveillance cameras in which manufacturers included options for third party access. An unspecified state institution installed several hundred cameras. They were manufactured by Chinese company Milesight. It is a serious company with a presence on the American market.

CERT.LV regularly organizes CyberChess event for IT security experts. During this event, IT technology experts try to hack devices chosen by organizers. «We thought it would be interesting to do something with security cameras. It is a very acute topic. People often set them up in their homes and companies. So I decided to come up with ways to make experts interested in finding ways to hack them. I thought about adding an artificial loophole,» – said IT security expert Kirils Solovjovs.

As it turned, however, the manufacturer had already installed something of the sort. A number of security weaknesses had been found in the test camera. Skilled hackers could easily exploit them. Experts found at least five vulnerabilities – five different potential backdoor access points. At least two of them provided complete control over the device. Those vulnerabilities have been fixed since the last CyberChess event. However, it was hard to force the manufacturer to do it.

China manufactures the lion’s share of the world’s electronic devices and their components. It is one of the leaders in software development as well. This scandal with spy-phones is not the only one that suggests China’s attempts to gather user data by using devices. The Pentagon had reported earlier in October that Lenovo computers produced in China have built-in spying software.

Former secretary to the National Security Council and deputy chief of the Constitution Protection Bureau Gundars Zalkalns allows that the Chinese government may have ties to spying devices.

Experts are certain that Latvia is not a target for China’s spying efforts. It is more likely those devices had ended up in the country with no such intent. It is far more likely those devices are intended to be realized in other, much larger economies. Defence Ministry’s state secretary Janis Garisons is confident the IT security situation in the country’s government sector is not bad. The situation is, however, problematic for the private sector, where people often try to save money on anti-virus software or procure cheaper phones and tablets. This only puts them, their business partners and the country at risk.

Ref: 102.109.109.5789


Leave a reply

Majority Saeima deputies support open president vote; UGF members fail to decide unanimously

On Thursday, 20 September, amendments to the Constitution regarding open election of the state president were approved in the second reading.

Four Estonian parties have strong support, enough to enter Riigikogu

Four Estonian parties are believed to currently have enough support to enter the Estonian parliament, a broad opinion poll showed, as leading parties compete for voter backing.

Vitol Group concerned over state of rule of law in Latvia; turns to state officials

One of the largest energy resource traders in the world – Vitol Group – has sent a letter to Latvia’s highest ranking officials, expressing deep concern over the rule of law and application of legislative acts in the litigation between LatRosTrans and Polocktransneft Druzba over the EUR 66 million worth technological oil.

As Pope heads to Baltics, more attention to Catholic sex abuse

The time, when Roman Catholic Pope Francis is set to visit the Baltics, greatly differs from the visit by Saint John Paul II in 1993. There is public resentment over the countries spending several million euros to host the trip of the pontiff and the Catholic sex abuse scandals are topic of discussion.

Officials asked to take responsibility for misuse of state resources

If misuse of state resources takes place, officials have to take responsibility and pay for the damages caused to the state, says Public Expenditure and Audit Committee chairman Andris Bērziņš.

May asks EU not to divide Britain, while Brussels waits for UK change of position

At a European Union summit in Austria, UK's Prime Minister Theresa May called on EU leaders leave behind "unacceptable" Brexit demands that according to her may rip Britain apart.

Saeima decides to divide EUR 8.3 million of healthcare budget funds to finance reforms

Saeima’s Budget and Finance Committee has supported the initiative to divide EUR 8.277 million from the planned chronic patient care funding to further finance reforms in the country’s healthcare system.

20 complaints received in first 10 days of data protection regulation

In the first 100 days since adoption of European General Data Protection Regulation, Latvia’s Data State Inspectorate has received 20 data protection violation reports, said the centre’s director Daiga Avdejanova during a meeting of Saeima’s European Affairs Committee.

Ministry: non-banking lenders should assess clients’ solvency more carefully

Although certain improvements have been noticed in the industry, Latvia’s Economy Ministry invites amendments to make non-banking lenders perform more careful evaluation of clients’ solvency and allow creditors exchange information with one another.

Saeima argues over request to assess attempts to cancel «morality amendments»

During a meeting of Saeima’s Inquiry Committee, certain members and NGO representatives exchanged harsh words on Saeima opposition deputies’ request to Prime Minister Māris Kučinskis on association Papardes zieds’ protection of interests for the cancellation of so-called morality amendments.

EU residents believe European authorities should be more involved in certain areas

According to results of European Parliament’s Eurobarometer study, published eight weeks prior to elections in EU, residents believe European authorities should be more involved in certain matters. Priorities include terrorism threats, unemployment and environmental protection.

Estonian internet user growth strongest among elderly

The share of internet users in Estonia has continued to grow in 2018 and has over the past three months increased the most among 65–74-year-olds, official statistics show.

Regulator invited to assess calculation of electricity transmission tariff

Conclusions made by State Audit in relation to tariffs employed by Sadales tīkls show that recommendations received from OECD a couple of years ago in relation to public service tariff calculation should be carefully considered and adopted to ensure balance the interests of consumers and service providers.

Latvian police points towards stagnation in road traffic safety

So far this year 91 people have died in road traffic accidents in Latvia. According to State Police Road Traffic Safety Office Chief Normunds Krapsis, stagnation is present for road traffic safety.

Latvian government to attract EUR 29.5 million to restore Latgale’s degraded territories

On Tuesday, 18 September, Latvia’s Cabinet of Ministers supported the action plan for Latgale region’s economic growth 2018-2021, which provides for attracting of EUR 29.5 million to help restore the region’s degraded territories.

China announces retaliatory tariffs on U.S. goods, seeks free trade support

Beijing has stated it would impose a duty tariff increase on American imports worth 60 billion U.S. dollars in a reaction to Washington's announcement to add tariffs on imports from China worth 200 billion U.S. dollars.

Montenegro to join NATO battalion stationed in Latvia

According to NATO Deputy Supreme Allied Commander in Europe James Everard, Montenegro plans to join the multi-national battalion currently stationed in Latvia.

U.S. looking seriously at Poland's request for American base on its soil

U.S President Donald Trump has noted the country was looking seriously at a request from Poland for a permanent U.S. military base in the fellow NATO member state and agreed that Polish concerns about possible Russian aggression were shared.

Russian plane near Syria shot down by ally targeting Israeli planes

The Russian military plane, which went missing on Monday, has been shot down by its ally Syria targeting Israel's war planes and the number of servicemen lost in the event has been corrected from 14 to 15, the Russian government stated.

Latvian border guards find more than 140 kg of hashish in a car

On 16 September, Latvian State Border Guard detained a 1991-born man and his car at Grebnev border checkpoint. A secret compartment containing 145.3 kg of narcotic substances was found in his car during a routine inspection, as reported by State Border Guard.

EU suspects German car-makers of colluding against cleaner technology

EU competition watchdogs are probing if German automotive giants have colluded to restrict the development of clean emission technology.

Number of job vacancies in Latvia up 7.8 thousand in Q2 2018

In Q2 2018 there were 24.5 thousand job vacancies in Latvia, which is 7.8 thousand vacancies or 46.6 % more than in Q2 2017. In public sector there were 7.2 thousand and in private sector 17.3 thousand job vacancies.

Latvian government desperate to resolve the growing piles of used tires problem

Latvian government has supported Environment Protection and Regional Development Ministry’s prepared report ‘On maintenance of used tires’. This report includes proposals for measures to help resolve the matter regarding speeding up recycling and regeneration rates, as well as the no less important matter of maintenance of used tires.

Cargo volumes handled by Latvian ports remain stable in first half-year of 2018

Latvian ports transshipped 43.468 million tonnes of cargoes in the first eight months of 2018, which is 0.9% more than in the same period of last year. According to data from Transport Ministry, cargo turnover’s negative balance continues declining at Ventspils port, where 13.274 million tonnes of cargoes were transshipped in the first eight months, which is a drop of 11.9%.

airBaltic carried 18% more passengers in summer

Latvian airline airBaltic has carried 2,770,047 more passengers to destinations in Europe, Scandinavia, Russia, CIS and the Middle East in the first eight months of 2018, BNN was told by the company.