China Accused of Spying On Americans Via Caribbean Phone Networks (newsweek.com) 53
"A mobile security expert has accused China of exploiting cellphone networks in the Caribbean to conduct 'mass surveillance' on Americans," reports Newsweek:
Gary Miller, a former vice president of network security at California-based analytics company Mobileum, told The Guardian he had amassed evidence of espionage conducted via "decades-old vulnerabilities" in the global telecommunications system. While not explicitly mentioned in the report, the claims appear to be centered around Signaling System 7 (SS7), a communications protocol that routes calls and data around the world and has long been known to have inherent security weaknesses.
According to Miller, his analysis of "signals data" from the Caribbean has shown China was using a state-controlled mobile operator to "target, track, and intercept phone communications of U.S. phone subscribers," The Guardian reported. Miller claimed China appeared to exploit Caribbean operators to conduct surveillance on Americans as they were traveling, alleging that attacks on cell phones between 2018 to 2020 likely affected "tens of thousands" of U.S. mobile users in the region.
"Once you get into the tens of thousands, the attacks qualify as mass surveillance," the mobile researcher said, noting the tactic is "primarily for intelligence collection and not necessarily targeting high-profile targets."
Interesting quote from the Guardian's original story: "We have an illusion of security when we talk on our mobile phones," said James Lewis, the director of the Strategic Technologies Program at the Center for Strategic and International Studies (CSIS). "People don't realise that we are under a sustained espionage attack on anything that connects to a network, and that this is just another example of a really aggressive and pretty sophisticated campaign."
Thanks to chill (Slashdot reader #34,294) for the story!
According to Miller, his analysis of "signals data" from the Caribbean has shown China was using a state-controlled mobile operator to "target, track, and intercept phone communications of U.S. phone subscribers," The Guardian reported. Miller claimed China appeared to exploit Caribbean operators to conduct surveillance on Americans as they were traveling, alleging that attacks on cell phones between 2018 to 2020 likely affected "tens of thousands" of U.S. mobile users in the region.
"Once you get into the tens of thousands, the attacks qualify as mass surveillance," the mobile researcher said, noting the tactic is "primarily for intelligence collection and not necessarily targeting high-profile targets."
Interesting quote from the Guardian's original story: "We have an illusion of security when we talk on our mobile phones," said James Lewis, the director of the Strategic Technologies Program at the Center for Strategic and International Studies (CSIS). "People don't realise that we are under a sustained espionage attack on anything that connects to a network, and that this is just another example of a really aggressive and pretty sophisticated campaign."
Thanks to chill (Slashdot reader #34,294) for the story!
Who they spy on? (Score:2)
Grannies who still use the phone app?
Re: (Score:2)
Yes. They've already got the kids covered via TikTok.
Re: (Score:2)
all of you are missing the point of where the spying is happening.
your boss walks up to you and says.
you have to go spy on the mentally crippled american capitalists.
their weak point is in the caribbean.
sun tan oil and warm beaches and great food.
best spy mission ever.
trumps twitter account has been hacked.
so just make stuff up.
who is going to know
Re: Who they spy on? (Score:2)
Re: (Score:2)
Yeah, but America doesn't have to subvert island cell networks and settle for spying on travellers like peasants. They just park a few hundred-metre radio dishes in geosynchronous orbit and slurp up all the signals.
Re: (Score:3)
Don't be silly, they just wander up to tech executives with a letter and threaten to destroy them and their company if they do not obey. They do not need to hack anything but have backdoors built right in and an office in tech corp to hover up ALL the data, never know what they might need to use, abuse, twist about, to destroy anyone they want to at anytime they want to.
Yeah, my next phone be a Linux phone preferable direct out of China. No more Android and definitely not Windows anal probe 10.
Who cares? (Score:3, Insightful)
China spying on ordinary Americans is no threat. Not sure why they bother, probably it's just to try to find important officials and anti-China dissident exiles among the clutter. They have no power over Americans. It's the Americans spying on you who you should be worried about, because they're the ones who can put you in jail.
Re: (Score:2)
Meanwhile China detects your incoming missiles and launches their own. Now you have TWO clouds of radioactive fallout floating all over. Dead Earth, again.
Even if you manage to avoid the fallout problem, every other nuclear power on the planet will launch what they've got
Re: (Score:3)
Why China go to all the trouble if the data is of no use to them?
Re:Who cares? (Score:5, Insightful)
To find the ex-pats still in contact with Chinese Citizens, important officials, and leaders of competing businesses. That data is of value, the rest of us are just noise.
Re: (Score:1)
Practise or fun.
The question you should be asking is why didn't America want the known vulnerabilities to be fixed? It's as if America wanted the protocols to be insecure...fought against making them stronger...why would that be...
Re: (Score:2)
Why China go to all the trouble if the data is of no use to them?
Because it is not much trouble. Storage is extremely cheap. A single tape can hold half a petabyte. Voice data compresses well. Keyword scanning can be done with off-peak computing capacity.
With a big enough haystack, they will find some needles.
Re: (Score:2)
They still had to go to the trouble of taking control of the infrastructure. Not like they sent a guy in with a flash drive.
Re:Who cares? (Score:5, Insightful)
China has demonstrated time and again that they're deeply involved in corporate espionage of all sorts. China collectively has its finger in a lot of American corporate pies. Do you think they'd be above using some privileged information gathered over this channel? Just because they can't send armed thugs to correct your bad thoughts doesn't mean they can't harm you or your interests in other ways.
I've never understood why people dismiss the damage Chinese espionage can do (even if not personal) when they have a *very* long history of proving otherwise. And just because I'm not okay with the US government spying on all its citizens doesn't mean I'm fine with the Chinese doing it either.
Re: (Score:2)
The reason it can be useful to monitor phones it that not everyone understand the risk. A good recent example is the POTUS calling a governor on y The governors unsecured mobile phone. This shows a significant lack of security protocol and an incentive for unfriendly actors to monitor.
A fu
Re: (Score:3)
What about the American politicians making millions off of business deals with the Chinese Communist party? Should we be worried about them?
Oh, really? (Score:2)
That's really cute that you believe China is above doing renditions [cbsnews.com]. An American goes missing in the Caribbean? Few will look at China as opposed to local criminals.
Re: (Score:2)
Unless you intend for you and your family to remain in the US, China holds a lot of influence over Americans. I know there's a pandemic going on right now, and it's really blunted wh
Think Attack Vector (Score:2)
1. Tax Dodgers
There are multiple, conveniently accessible tax havens in the Caribbean, perfect for a US citizen who is trying to hide their wealth. And when that citizen visits - maybe to talk to their accountant - they may end up having indiscreet phone conversations that will make excellent blackmail material. People illegally hiding their wealth to evade taxes are
Re: (Score:2)
Like the USA, but small scale? (Score:4, Insightful)
Re: (Score:1)
--
WindBlown.
Okay, he was a vice-president (Score:2)
Not that the overall claim isn't believable., but - does he have any actual security bonafides?
I mean, we've seen people with a music degree in similar roles... and his other roles with the analytics company were apparently "vice president of client solutions" and "vice president of global data solutions". And now, he's running a film and media company. So I'd like to know what actual security work he's done.
Caribbean (Score:1)
Oh horrors! The Chinese saw all your selfies with Pina Coladas.
Yeah. They also saw a few of you setting up offshore bank accounts. But you thought US authorities weren't watching that as well?
Re: (Score:1)
And US intelligence missed that? (Score:3)
Re: (Score:3)
They were too busy laughing at how quaint it is to do signals intelligence from the ground.
anybody surprised? (Score:2, Insightful)
Fact is, that China and Russia are no different.
Re: (Score:1)
Re: (Score:3)
This is exactly why we need to stop Chinese hardware/software, coming to the West.
Yeah, Americans who are too broke to eat can use their $600 stimulus check to slap a down payment on their $12,000 American-made iPhone 15.
That should go over like a screen door on a Chinese submarine.
Re: (Score:2)
Re: (Score:1)
It's in the f'kn summary
"decades-old vulnerabilities"
America wanted it that way, decades ago China and other countries weren't a threat. America was happy to scoop up all the info. Now other countries can too, suddenly after decades of purposefully weakening the standards to make intel gathering wasier, America wants to cry about it?
This is why you don't let America set the global standards.
Phone systems are not secure, literally by design (Score:3, Interesting)
Re: (Score:3)
Re: (Score:1)
Now that other countries are also looking, America suddenly complains about the lack of security...Why not decades ago, or every year since when the standards have been shown to be lacking security. It's hardly news. It's always been that way. It was put that way intentionally. It was kept that way intentionally too.
Re: Phone systems are not secure, literally by des (Score:2)
america accused of spying on everyone else (Score:1)
via almost every other phone or data network.
Back in the day... (Score:1)
Ofcourse.. (Score:2)