Shadow Network

Edit links
Source: Wikipedia, the free encyclopedia.

The Shadow Network is a

cyber espionage operation of this sort by China, discovered by researchers at the Information Warfare Monitor, following the discovery of GhostNet in March 2009.[3][4][5] The Shadow Network report "Shadows in the Cloud: Investigating Cyber Espionage 2.0" was released on 6 April 2010, approximately one year after the publication of "Tracking GhostNet."[6]

The cyber spying network made use of Internet services,

Blogspot, and blog.com,[5] which were used to host malware[7] and infect computers with malicious software.[4]

Discovery

The Shadow Net report

Shadowserver Foundation.[3][7][9] The Shadow Network was discovered during the GhostNet investigation,[3] and researchers said it was more sophisticated and difficult to detect.[3][5] Following the publication of the GhostNet report, several of the listed command and control servers went offline;[3][10] however, the cyber attacks on the Tibetan community did not cease.[10]

The researchers conducted field research in Dharamshala, India, and with the consent of the Tibetan organizations, they were able to monitor the networks in order to collect copies of the data from compromised computers and identify command and control servers used by the attackers.[7][11] The field research done by the Information Warfare Monitor and the Shadowserver Foundation found that computer systems in the Office of His Holiness the Dalai Lama (OHHDL) had been compromised by multiple malware networks, one of which was the Shadow Network.[12]

Further research into the Shadow Network revealed that, while India and the Dalai Lama's offices were the primary focus of the attacks,[5] the operation compromised computers on every continent except Australia and Antarctica.[1][13]

The research team recovered more than 1,500 e-mails from the Dalai Lama's Office[1][4] along with a number of documents belonging to the Indian government.[1] This included classified security assessments in several Indian states, reports on Indian missile systems,[10] and documents related to India's relationships in the Middle East, Africa, and Russia.[1][5] Documents were also stolen related to the movements of NATO forces in Afghanistan,[5] and from the United Nations Economic and Social Commission for Asia and the Pacific (UNESCAP).[4][5] The hackers were indiscriminate in what they took, which included sensitive information as well as financial and personal information.[4]

Origin

The attackers were tracked through e-mail addresses

University of Electronic Science and Technology in Chengdu.[2] The account of another hacker was linked to a Chengdu resident who claimed to know little about the hacking.[5]

References

  1. ^ a b c d e f Anna, Cara (6 April 2010). "'Shadow Network' Of Chinese Hackers Steal Dalai Lama's Emails: REPORT". The Huffington Post. Retrieved 1 Nov 2014.
  2. ^ a b Branigan, Tania (6 April 2010). "Cyber-spies based in China target Indian government and Dalai Lama". The Guardian. Retrieved 1 Nov 2010.
  3. ^ a b c d e f Zetter, Kim (6 April 2010). "Spy Network Pilfered Classified Docs From Indian Government and Others". Wired. Retrieved 1 Nov 2014.
  4. ^ a b c d e f g "Shadow cyber spy network revealed". BBC News. 6 April 2010. Retrieved 1 Nov 2014.
  5. ^ a b c d e f g h i Markoff, John; Barboza, David (5 April 2010). "Researchers Trace Data Theft to Intruders in China". The New York Times. Retrieved 1 Nov 2014.
  6. ^ "SHADOWS IN THE CLOUD: Investigating Cyber Espionage 2.0". Scribd. The SecDev Group. 6 April 2010. p. 2. Retrieved 4 Nov 2010.
  7. ^ a b c Mills, Elinor (6 April 2010). "Report: India targeted by spy network". CNET. Retrieved 1 Nov 2014.
  8. ^ "SHADOWS IN THE CLOUD: Investigating Cyber Espionage 2.0". Scribd. The SecDev Group. 6 April 2010. Retrieved 1 Nov 2014.
  9. ^ Robertson, Grant (6 April 2010). "Canadian researchers reveal online spy ring based in China". The Globe and Mail. Retrieved 1 Nov 2014.
  10. ^ a b c Moore, Malcolm (6 April 2010). "Chinese hackers steal Dalai Lama's emails". The Telegraph. Retrieved 1 Nov 2010.
  11. ^ "SHADOWS IN THE CLOUD: Investigating Cyber Espionage 2.0". Scribd. The SecDev Group. 6 April 2010. p. 9. Retrieved 1 Nov 2014.
  12. ^ "SHADOWS IN THE CLOUD: Investigating Cyber Espionage 2.0". Scribd. The SecDev Group. 6 April 2010. p. 13. Retrieved 1 Nov 2014.
  13. ^ "SHADOWS IN THE CLOUD: Investigating Cyber Espionage 2.0". Scribd. The SecDev Group. 6 April 2010. p. 32. Retrieved 1 Nov 2014.

External links

Retrieved from "https://en.wikipedia.org/w/index.php?title=Shadow_Network&oldid=1113435863"