Malware tied to Chinese hackers has been found infecting telecommunication networks to steal SMS messages from thousands of phone numbers.
The nipple eroticism storiesspying effort comes from a Chinese state-sponsored hacking group called APT 41, according to the cybersecurity firm FireEye. On Thursday, the company published a report on a malware strain from the group that's designed to infect Linux-based servers used by telecommunication carriers to route SMS messages.
Some time this year, FireEye uncovered the malicious computer code on a cluster of servers belonging to an unnamed telecommunication network provider. "During this intrusion, thousands of phone numbers were targeted, to include several high-ranking foreign individuals likely of interest to China," the company told PCMag.
Interestingly, the malware is selective of which SMS messages it will try to collect. The APT 41 hackers pre-programmed it using two lists. The first one searches outs the target, based on the person's phone number and International Mobile Subscriber Identity (IMSI) number. The second list contains certain keywords that the malware will seek to find within the SMS messages. If one of the keywords is found in an SMS message, the malware will then save it in a .CSV file, which the hacker can later extract.
"The keyword list contained items of geopolitical interest for Chinese intelligence collection. Sanitized examples include the names of political leaders, military and intelligence organizations and political movements at odds with the Chinese government," FireEye researchers said in the report.
The suspected Chinese hackers behind the malware also clearly knew who they were targeting, since they had access to both the victims' phone numbers and the IMSI numbers, which is harder to come by. On some Android phones, you can access the IMSI number in the settings function. But the information is primarily used by telecommunication carriers to uniquely identity each subscriber on a cellular network, which suggests the hackers had some serious intel-collecting abilities.
In the same intrusion, the hackers were also found interacting with databases that contained voice call record details, including the time of the call, the duration and the phone numbers involved.
"In 2019, FireEye observed four telecommunication organizations targeted by APT41 actors," the company added in today's report, which refrained from naming the organizations hit. "Further, four additional telecommunications entities were targeted in 2019 by separate threat groups with suspected Chinese state-sponsored associations."
SEE ALSO: Facebook sues WhatsApp developer that allegedly put spyware on phones of journalists and political dissidentsOther security researchers have also noticed suspected Chinese cyberspies infiltrating cellular networks. In June, security firm Cybereason uncovered evidence that Chinese hackers had broken into telecommunication carriers to steal call log and location data from "high-value" individuals across the globe.
The attacks underscore the risk of sending unencrypted information over cellular networks; the content is readable to whoever controls the SMS routing server. For especially sensitive messages, it's a good idea to use a mobile messaging app, such as WhatsApp or Signal, which offer end-to-end encryption.
Topics Cybersecurity Politics
Amazon Prime Day deal: This Echo bundle is $140 offMediaTek Q1 revenue up 14.9% yEle.me hits 10 million daily orders as Alibaba steps up instant delivery push · TechNodePrime Day headphones and speakers deals: Bose, Apple, Ultimate Ears, and moreJD.com files trademark for ‘Joyrobotaxi,’ signaling interest in autonomous rideJD.com files trademark for ‘Joyrobotaxi,’ signaling interest in autonomous rideZeekr debuts first hybrid SUV to compete with RollsCATL says it is first to meet China’s new battery safety standards · TechNodeNASA's Parker Solar Probe just flew over 500 times the speed of soundTsinghua University launches AIChicago Sky vs. Las Vegas Aces 2024 livestream: Watch WNBA for freeConnecticut Sun vs. New York Liberty 2024 livestream: Watch WNBA for freeAfter hardware team layoffs, Thin Red Line resumes hiring for AI roles · TechNodeEarly Prime Day Ninja deals: 15+ air fryers, blenders, morePrime Day 2024 deals on tablets from Apple, Samsung, and AmazonBest AirPods Max deal: Early Prime Day Apple AiPods Max dealJD.com files trademark for ‘Joyrobotaxi,’ signaling interest in autonomous rideCATL says it is first to meet China’s new battery safety standards · TechNodeChinese milk tea chain Chagee hits $6.2 billion valuation on Nasdaq debut · TechNodeAmazon Prime Day deal: This Echo bundle is $140 off The internet is freaking out over this gross 'medium rare' chicken recipe Finally, we get the Trump T For game developers, HTC's Vive edges out the Oculus Rift JetBlue now has free Wi For the first time ever, a bumblebee is on the U.S. endangered species list 'Pile of garbage' Buzzfeed responds to Trump with a beautiful act of passive aggression Grammy winner A.R. Rahman recreates old song and the Indian web explodes These robots are transforming how we see wildlife Enhance and Upscale: FSR 2.2 vs DLSS 2.4 Analysis Doctors discover why stressed out people have more heart attacks Flamengo vs. Chelsea 2025 livestream: Watch Club World Cup for free Vagina necklaces you didn't know you needed and now can't have Trevor Noah saw plenty to fear in Trump's press conference FDA warns connected cardiac devices vulnerable to hacking Andy Cohen's got the 411 on those 'Real Housewives Reunion' leaks Airtel launches India's first payments bank Mexico's solution to Trump's tweets? Buy Twitter and shut it down Janelle Monáe's NASA photoshoot makes the space age cool again Read an exclusive excerpt of Jeff Zentner's upcoming 'Goodbye Days' Welcome to the jazzy 'Bad and Boujee' remix the internet has needed
1.6381s , 10195.828125 kb
Copyright © 2025 Powered by 【nipple eroticism stories】,Feast Information Network