China turns cyber-espionage eyes to Russia as Ukraine invasion grinds on China appears to be entering a raging cyber-espionage battle that's grown in line with Russia's unprovoked attack on Ukraine, deploying advanced malware on the computer systems of Russian officials. Bronze President, a China-linked threat group that typically targeted government entities and non-governmental organizations ( …
The methods documented as used by the China hackers are pretty much standard hacking methods, maybe they hacked the hackers to learn them, or maybe they were hacked by the Russians and figured it out? This is not a joke, it's just a yawn - this sort of thing is going on everywhere these days ... I'm not worried, I'm just bored. I have our mail servers set to stop all this by limiting every risky attachment and email format.
I've been saying for decades that if I were writing malware my build server would be set to a foreign language and comments in the code would be in that language as well. I'd probably also find out which programming languages are popular in that region and learn a new one to write the malware if necessary.
if you were writing malware for any state sponsored group (maybe some deep-pocketed US entities excepted), you'd be told that your code better be ready yesterday because there is a new threat that should be investigated today, at the latest. And what did you do last week to earn your pay?
I understand your reasoning, but I would assume that most state sponsored hackers are ordinary family men who code to make a living and a salary. Not everyone is out to invent the perfect crime. And if you convince your boss that obfuscation is warranted, he might give you a week to delete all comments in your source and rename a few variables.
I was just going to ask: Who in their right mind would allow .exe attachments through their mail system?
This is not the early 90's anymore for god sake!!
Also, hiding the file extension on email attachments has to be one of the stupidest things Microsoft has ever done. And, that is a very big list to be at the top of!!
In one of Sir Terry Pratchett's Discworld novels, the Patrician of Ankh-Morpork patiently explains that he knows his enemies are trying to subvert the city, so he needs to spy on his friends to make sure they don't make any unexpected decisions that could be 'inconvenient'. (As I recall, I have undoubtedly not expressed it as eloquently as Sir Terry.)
I'm sure the Chinese leadership are as keen as anyone to know what is going on in the Moscow Kremlin at the moment.
That's simple: China is in the process of installing itself as Russia's "protector", in the 17th century sense of the word.
(I guess the modern analogue would be something like "owner".)
They're adding spyware to Russian systems in the same way, and for much the same reasons, as some employers add it to the systems of WFH employees.
For a scary explanation of what Putin might actually be doing with his invasion of Ukraine, try:
https://www.dailykos.com/stories/2022/4/26/2094225/-A-terrifying-look-into-Putin-s-possible-motivation-leading-to-the-invasion-of-Ukraine
"Since Putin launched a war of aggression against Ukraine, without even bothering to justify it with anything other than a few stale lines of crude propaganda, I was perplexed by the strategic insanity of this decision. Let’s set aside the quaint idea that Putin would be governed by any kind of basic morals or international norms, but what was there to be gained from it?"
the truth is probably far more simple. He thought he could win quickly. He wants to make Russia great again. Hes been told that his army is fantastic with wonderful new tanks that are much better. The airforce is excellent, navy is fantastic, troops are in excellent condition. In short Russia is poised to be a superpower comrade. Eat Ukraine and unite the motherland. Europe will cower behind the might of our gas wielding state.
The truth is that Ukrainian farmers with tractors have more backbone and that the war ia going really really badly.
Noone has dared tell Putin this yet.
I don't see anything particularly scary about it.
Where this "Grumpy Old Man Putin" theory falls down is that he's in a position to install his own successor. That's how he got the job, after all. Putin can easily secure his legacy by finding just one young person who has a similar world view, and installing him securely in the top job, before his own time runs out. Starting the war in Ukraine does not help him in this regard at all, even if all had gone perfectly.
China doesn't give a damn about Russia. If they have to choose between having commercial relations with Russia and commercial relations with the Western World, it will choose the more profitable one. For now, China tries officially to stay in between, to take advantages from both sides - and it's clever, even if it's amoral. But morality is a bourgeois feeling, isn't it?
China would love to get a grip on Siberia's resources. If it can destabilize Russia enough to make a part of Siberia secedes, it will do it for sure.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
