CASPER
New member
Canadian researchers uncover vast computer spying operation
By The Canadian Press
Canadian researchers have uncovered a computer spying operation that they say has stolen documents from hundreds of government and private offices around the world.
The New York Times website reported Saturday that the researchers, based at the Munk Centre for International Studies at the University of Toronto, said the system was being controlled from computers based almost exclusively in China.
But they could not say conclusively the Chinese government was involved.
A spokesman for the Chinese Consulate in New York dismissed the idea that China was involved.
The researchers had been asked by the office of the Dalai Lama, the exiled Tibetan leader whom China regularly denounces, to examine its computers for signs of malicious software, or malware.
"We uncovered real-time evidence of malware that had penetrated Tibetan computer systems, extracting sensitive documents from the private office of the Dalai Lama," investigator Greg Walton said.
They discovered a broader operation that, in less than two years, has infiltrated at least 1,295 computers in 103 countries, including many belonging to embassies, foreign ministries and other government offices.
The researchers said they believe in addition to the spying on the Dalai Lama, the system, which they called GhostNet, was focused on the governments of South Asian and Southeast Asian countries.
The operation continues to invade and monitor more than a dozen new computers a week, the researchers said.
The malware can turn on camera and audio-recording functions of an infected computer, enabling monitors to see and hear what goes on in a room.
The researchers were able to monitor the commands given to infected computers and to see the names of documents retrieved by the spies but in most cases the contents of the stolen files have not been determined.
Working with the Tibetans, however, the researchers found specific correspondence had been stolen and the intruders had gained control of the electronic mail server computers of the Dalai Lama's organization.
The researchers said they have notified international law-enforcement agencies of the spying operation.
The F.B.I. declined comment on the operation.
The researchers are to publish their findings in Information Warfare Monitor, an online publication associated with the Munk Centre.
By The Canadian Press
Canadian researchers have uncovered a computer spying operation that they say has stolen documents from hundreds of government and private offices around the world.
The New York Times website reported Saturday that the researchers, based at the Munk Centre for International Studies at the University of Toronto, said the system was being controlled from computers based almost exclusively in China.
But they could not say conclusively the Chinese government was involved.
A spokesman for the Chinese Consulate in New York dismissed the idea that China was involved.
The researchers had been asked by the office of the Dalai Lama, the exiled Tibetan leader whom China regularly denounces, to examine its computers for signs of malicious software, or malware.
"We uncovered real-time evidence of malware that had penetrated Tibetan computer systems, extracting sensitive documents from the private office of the Dalai Lama," investigator Greg Walton said.
They discovered a broader operation that, in less than two years, has infiltrated at least 1,295 computers in 103 countries, including many belonging to embassies, foreign ministries and other government offices.
The researchers said they believe in addition to the spying on the Dalai Lama, the system, which they called GhostNet, was focused on the governments of South Asian and Southeast Asian countries.
The operation continues to invade and monitor more than a dozen new computers a week, the researchers said.
The malware can turn on camera and audio-recording functions of an infected computer, enabling monitors to see and hear what goes on in a room.
The researchers were able to monitor the commands given to infected computers and to see the names of documents retrieved by the spies but in most cases the contents of the stolen files have not been determined.
Working with the Tibetans, however, the researchers found specific correspondence had been stolen and the intruders had gained control of the electronic mail server computers of the Dalai Lama's organization.
The researchers said they have notified international law-enforcement agencies of the spying operation.
The F.B.I. declined comment on the operation.
The researchers are to publish their findings in Information Warfare Monitor, an online publication associated with the Munk Centre.