Bangkok, November 12, 2024 — Chinese hackers hit Tibetan sites in a bold spyware attack, tracking users and gathering intel in a bid to control the Tibetan narrative. State-sponsored cyberwarfare escalates, sparking global alarm.
In a significant escalation, Chinese state-sponsored hackers targeted Tibetan websites in a stealthy spyware attack aimed at tracking visitors’ activities. The cyberattack infiltrated two prominent Tibetan sites—Tibet Post and Gyudmed Tantric University—prompting cybersecurity firm Insikt Group to warn users of the sophisticated malware planted to gather intelligence on Tibetan interests and organizations.
These hackers, tagged as TAG-112 by Insikt, disguised the spyware as a “security certificate.” Once downloaded, the malware installs Cobalt Strike Beacon, allowing keylogging, file transfers, and potentially further infiltration. Experts see this as another step in China’s long-running cyber espionage against groups advocating Tibetan independence and democratic rights.
This behavior aligns with historical targeting of the Tibetan community.
The attack not only sought data but also reinforced China’s grip over Tibet, long contested by Tibetans and human rights groups. The hacking group, TAG-112, appears to be a subset of the notorious TAG-102, or “Evasive Panda,” which has targeted dissident organizations in Taiwan, Hong Kong, and beyond.
Insikt Group’s research indicates these groups share tactics and specific malware tools commonly seen in Chinese Advanced Persistent Threat (APT) groups. While the Gyudmed Tantric University website has since remedied the breach, Tibet Post remains compromised, underscoring the difficulty in countering well-funded state-backed cyber threats.
It’s almost certain TAG-112 was engaged in surveillance rather than destructive attacks.e
The attack highlights China’s ongoing digital crackdown, as Beijing attempts to maintain control over the Tibetan narrative amidst global scrutiny.
Other News At VPNRanks
Hey, wait!
Stay informed on the latest privacy updates, cybersecurity insights, and internet freedom news by following VPNRanks news daily! As your primary resource for critical updates in online security, we ensure you’re always in the know. Make VPNRanks your go-to guide for safeguarding your digital life!
