Security firm links cyber spy campaign to Chinese hacker

Mar 30, 2012
Tokyo-based computer security firm Trend Micro on Friday said it linked a hacker in China to a "cyber espionage" campaign targeting India, Japan, and Tibetans.

Tokyo-based computer security firm Trend Micro on Friday said it linked a hacker in China to a "cyber espionage" campaign targeting India, Japan, and Tibetans.

A Chinese hacker whose nicknames include "Dang0102" and "scuhkr" was involved in online spying to steal , spy on Tibetan activists and mine information from players in the energy, shipping and .

"The Luckycat campaign attacked a diverse set of targets using a variety of malware, some of which have been linked to other cyber-espionage campaigns," Trend Micro said in a research paper.

"We were able to track elements of this campaign to hackers based in China."

Luckycat has been going on at least since June of 2011 and has been linked to 90 in Japan and India and on Tibetan activists, according to Trend Micro.

Cyber spies compromised 233 computers, usually by tricking users into opening links or files booby-trapped with crafted to let hackers continually loot information, the security company said.

The pinpointed Luckycat hacker has published posts in a notorious XFocus online forum and recruited peers to join a network attack and defense project at the Sichaun University Information Security Institute, according to Trend Micro.

Trend Micro refused to comment on reports that the hacker was a former graduate student who works for China's leading Internet portal Tencent.

The report did not directly implicate the Chinese government, but believed that the style of the attacks and the types of targets indicated state-sponsored spying.

"Unlike largely indiscriminate attacks that focus on stealing credit card and banking information associated with cybercrime, targeted attacks noticeably differ and are better characterized as cyber espionage," Trend Micro said.

Explore further: IBM dips into Twitter stream for business insights

add to favorites email to friend print save as pdf

Related Stories

New cyber attack on Japan parliament

Nov 02, 2011

Japan's parliament has come under cyber attack again, apparently from the same emails linked to a China-based server that have already hit several lawmakers' computers, an official said Wednesday.

Recommended for you

HTML5 reaches 'Recommendation' status

20 hours ago

W3C stands for World Wide Web Consortium, and the W3C HTML Working Group is responsible for this specification's progress. As the title suggests, they have a far-reaching job of watching out for the progress ...

Online dating service admits to fake profiles

22 hours ago

A British-based online dating service admitted to US regulators Wednesday that it created fake, computer-generated profiles to lure users into upgraded memberships.

NY voters to decide on digital legislation

Oct 28, 2014

If New York voters approve proposition No. 2 on the ballot next week, their 213 legislators will join the digital age. Their desks in the ornate chambers of the Capitol will have computers instead of thick stacks of bills ...

User comments : 1

Adjust slider to filter visible comments by rank

Display comments: newest first

seilgu
not rated yet Mar 31, 2012
Isn't Trend Micro a Taiwanese company?

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.