Security firm links cyber spy campaign to Chinese hacker

Mar 30, 2012
Tokyo-based computer security firm Trend Micro on Friday said it linked a hacker in China to a "cyber espionage" campaign targeting India, Japan, and Tibetans.

Tokyo-based computer security firm Trend Micro on Friday said it linked a hacker in China to a "cyber espionage" campaign targeting India, Japan, and Tibetans.

A Chinese hacker whose nicknames include "Dang0102" and "scuhkr" was involved in online spying to steal , spy on Tibetan activists and mine information from players in the energy, shipping and .

"The Luckycat campaign attacked a diverse set of targets using a variety of malware, some of which have been linked to other cyber-espionage campaigns," Trend Micro said in a research paper.

"We were able to track elements of this campaign to hackers based in China."

Luckycat has been going on at least since June of 2011 and has been linked to 90 in Japan and India and on Tibetan activists, according to Trend Micro.

Cyber spies compromised 233 computers, usually by tricking users into opening links or files booby-trapped with crafted to let hackers continually loot information, the security company said.

The pinpointed Luckycat hacker has published posts in a notorious XFocus online forum and recruited peers to join a network attack and defense project at the Sichaun University Information Security Institute, according to Trend Micro.

Trend Micro refused to comment on reports that the hacker was a former graduate student who works for China's leading Internet portal Tencent.

The report did not directly implicate the Chinese government, but believed that the style of the attacks and the types of targets indicated state-sponsored spying.

"Unlike largely indiscriminate attacks that focus on stealing credit card and banking information associated with cybercrime, targeted attacks noticeably differ and are better characterized as cyber espionage," Trend Micro said.

Explore further: Facebook 'newspaper' spells trouble for media

add to favorites email to friend print save as pdf

Related Stories

New cyber attack on Japan parliament

Nov 02, 2011

Japan's parliament has come under cyber attack again, apparently from the same emails linked to a China-based server that have already hit several lawmakers' computers, an official said Wednesday.

Recommended for you

Spotify prompts industry debates on streaming

7 hours ago

From board rooms in Japan to songwriter's rooms in Nashville, a debate is brewing in music industry circles about the financial and creative value of streaming music, even as its popularity and impact skyrocket.

User comments : 1

Adjust slider to filter visible comments by rank

Display comments: newest first

seilgu
not rated yet Mar 31, 2012
Isn't Trend Micro a Taiwanese company?

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.