Results 1 to 23 of 23
  1. #1
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555

    Chinastan government force companies to install their spyware.

    Filthy chinky scum.

    Spyware features found in Chinese state benefits app

    Spyware-like features have been discovered inside an app named “Beijing One Pass” that foreign companies operating in China are forced to install on their systems in order to access a digital platform to manage employee state benefits.


    The spyware behavior was discovered last month by Insikt Group, the threat research division of Recorded Future, which analyzed a copy received from a customer who was forced to install the suspicious on its systems.

    According to the
    team’s analysis, the app contained features that could be considered “suspicious for a benefits software application” and which are ordinarily found in malware strains. This included features such as:



    • Disabling of security and backup services on the host device
    • Reading data from the clipboard
    • Recording screenshots
    • Capturing and retrieving keystrokes
    • Attempt to read, create, or modify system registry ROOT certificates
    • Check periodically for human interaction with the operating system as the file is run
    • Allow-listing domains for ActiveX use, which would allow it to connect to external internet resources
    • The ability to autorun at Windows startup to ensure persistence

      The suspicious app, shown in the image above, was developed by the Beijing Certificate Authority (BJCA), a Chinese state-owned company primarily known for its certificate authority (CA) business.

      At the time of writing, it is unclear if the spyware features were added inside the Beijing One Pass software on purpose or if they were inserted after a compromise of the company’s software development pipeline.


      Contacted by phone, a BJCA spokesperson did not want to comment.


      While information about how the spyware functionality made it inside the app is still shrouded in mystery, their presence is undeniable. Furthermore, companies doing business in China may not have an option and may be forced to install the software.


      For this reason, Insikt Group analysts recommend that companies run the app only on systems that do not store sensitive corporate information.


      The Insikt Group’s discovery is also reminiscent of the findings of Trustwave Labs, which found in June 2020 that a Chinese bank was forcing foreign companies operating in China to install
      a backdoored app in order to file taxes with local governments.

  2. #2
    Thailand Expat
    Klondyke's Avatar
    Join Date
    Aug 2014
    Last Online
    26-09-2021 @ 10:28 PM
    Posts
    10,105
    ^Why they are not so transparent and honest as (please no names here)...

  3. #3
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Puppy you're supposed to wait until hoohoo has posted some nonsensical reply before you come yapping.

  4. #4
    I'm in Jail

    Join Date
    Oct 2016
    Last Online
    08-02-2023 @ 01:23 PM
    Location
    I'm Dead
    Posts
    7,133
    Quote Originally Posted by harrybarracuda View Post
    the app contained features that could be considered “suspicious
    So its just Chinese whispers then?

  5. #5
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by Chico View Post
    So its just Chinese whispers then?
    In very many senses, yes.


  6. #6
    Thailand Expat
    Farang Ky Ay's Avatar
    Join Date
    May 2009
    Last Online
    03-01-2022 @ 12:29 AM
    Location
    Chiang Mai
    Posts
    2,081
    Reminds me of the PRISM surveillance system, well it's not good in both cases

  7. #7
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by Farang Ky Ay View Post
    Reminds me of the PRISM surveillance system, well it's not good in both cases
    Do you think the chinkies aren't already spying on all internet traffic they can get their hands on then?

    Although that has nothing to do with forcing companies to install spying software on their company computers.

  8. #8
    Thailand Expat
    Farang Ky Ay's Avatar
    Join Date
    May 2009
    Last Online
    03-01-2022 @ 12:29 AM
    Location
    Chiang Mai
    Posts
    2,081
    I think they do as American and others do yes. In one case it's a scandal and in others that's just how things are, seemingly.

  9. #9
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by Farang Ky Ay View Post
    I think they do as American and others do yes. In one case it's a scandal and in others that's just how things are, seemingly.
    In Chinastan, yes, it's how it is. The chinkies made laws to force companies to open their networks to state spies and now they are trying to install spying software on their computers.

    Then they wonder why people don't trust them.

  10. #10
    I'm in Jail

    Join Date
    Oct 2016
    Last Online
    08-02-2023 @ 01:23 PM
    Location
    I'm Dead
    Posts
    7,133
    Only a scandal if its the Russians and Chinese, Beggars belief how they can bamboozle so many intelligent people.

  11. #11
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by Chico View Post
    Only a scandal if its the Russians and Chinese, Beggars belief how they can bamboozle so many intelligent people.
    Even the Russians don't force companies to open their networks and install spyware on their machines.

    The chinkies have set the bar way lower than Putin, and that's saying something.

  12. #12
    I'm in Jail

    Join Date
    Oct 2016
    Last Online
    08-02-2023 @ 01:23 PM
    Location
    I'm Dead
    Posts
    7,133
    Quote Originally Posted by harrybarracuda View Post
    Even the Russians don't force companies to open their networks and install spyware on their machines.

    The chinkies have set the bar way lower than Putin, and that's saying something.
    Didn't Snowdon, expose the Spy program and then again how about Prism. Those damn Chinese spying on the world.

  13. #13
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by Chico View Post
    Didn't Snowdon, expose the Spy program and then again how about Prism. Those damn Chinese spying on the world.
    You're confusing spying on internet traffic, which anyone can do, with invading private networks and computers.

    Snowden thinks he's some kind of hero for exposing that the US do it, I suppose he and you believe the Russians aren't doing exactly the same thing.

    But then again you're not very bright.


  14. #14
    I'm in Jail

    Join Date
    Oct 2016
    Last Online
    08-02-2023 @ 01:23 PM
    Location
    I'm Dead
    Posts
    7,133
    Harry, you're either very naive or just plain ignorant

  15. #15
    Thailand Expat
    Klondyke's Avatar
    Join Date
    Aug 2014
    Last Online
    26-09-2021 @ 10:28 PM
    Posts
    10,105
    ^Or double standards?

  16. #16
    Thailand Expat
    panama hat's Avatar
    Join Date
    Mar 2007
    Last Online
    21-10-2023 @ 08:08 AM
    Location
    Way, Way South of the border now - thank God!
    Posts
    32,680
    Quote Originally Posted by Chico View Post
    Harry, you're either very naive or just plain ignorant
    I agree . . . you calling Harry naive or ignorant is simply delicious, added with Klongdick's accusations of 'double standards'. Nice.




    Quote Originally Posted by harrybarracuda View Post
    You're confusing spying on internet traffic, which anyone can do, with invading private networks and computers.
    This is the difference some people need to understand, as well as coercion of companies to instal spy-software on their own platforms.

    A double standard would be if Harry condones it if the UK does it . . . which he hasn't so far mentioned

  17. #17
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by Chico View Post
    Harry, you're either very naive or just plain ignorant
    Says the person who clearly doesn't understand what the chinkies are up to or wishes to try and play it down.

  18. #18
    I'm in Jail

    Join Date
    Oct 2016
    Last Online
    08-02-2023 @ 01:23 PM
    Location
    I'm Dead
    Posts
    7,133
    Not at all Harry, the Brits and Americans have their own programs, spyware is spyware if you telephone is connected to your com/laptop/ipad you're fekked.

    The Israelis are doing a good job of keeping tabs on everyone

  19. #19
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by Chico View Post
    Not at all Harry, the Brits and Americans have their own programs, spyware is spyware if you telephone is connected to your com/laptop/ipad you're fekked.

    The Israelis are doing a good job of keeping tabs on everyone
    No chico, the Brits and Americans do not have laws that mandate companies opening their networks to state intelligence services, nor do they hide spying software in government mandated software.

    To paraphrase Fauci, "You're an idiot and you don't know what you're talking about".

  20. #20
    I'm in Jail

    Join Date
    Oct 2016
    Last Online
    08-02-2023 @ 01:23 PM
    Location
    I'm Dead
    Posts
    7,133
    keep believing the Propaganda silly fuckers are constantly bleating about shit, most probably also still believe in Santa Claus as well.

  21. #21
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by Chico View Post
    keep believing the Propaganda silly fuckers are constantly bleating about shit, most probably also still believe in Santa Claus as well.
    And still an idiot.

  22. #22
    Thailand Expat helge's Avatar
    Join Date
    May 2008
    Last Online
    @
    Posts
    11,664
    Quote Originally Posted by harrybarracuda View Post
    Even the Russians don't force companies to open their networks and install spyware on their machines.
    Link ?

  23. #23
    Thailand Expat harrybarracuda's Avatar
    Join Date
    Sep 2009
    Last Online
    @
    Posts
    96,555
    Quote Originally Posted by helge View Post
    Link ?
    What, a link to something they don't do?

    What are you, a Danish cyclist?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •