Feeds

Britain warns businesses of Chinese 'honey trap'

Sex, spies, and memory sticks

Seven Steps to Software Security

Britain's MI5 security service has accused the Chinese government of engaging in an unusually wide-ranging campaign to breach UK business computer networks, in some cases exploiting sexual relationships to pressure individuals to cooperate.

The so-called "honey trap" methods were aimed at business executives at trade shows and exhibitions and involved offers of "lavish hospitality and flattery," according to an article in The Sunday Times. The New York Times quickly confirmed the report. The effort also involved the giving of digital cameras and memory sticks designed to surreptitiously install malware on users' PCs.

The Sunday Times cited a 14-page document titled "The Threat from Chinese Espionage" that was prepared in 2008 by MI5's Center for the Protection of National Infrastructure. A "restricted" version of the document was distributed to hundreds of British financial institutions and businesses. It described attacks on British defense, energy, communications, and manufacturing companies. It specifically named the Chinese government as engaging in the honey trap campaigns.

"Chinese intelligence services have also been known to exploit vulnerabilities such as sexual relationships and illegal activities to pressurize individuals to cooperate with them," it stated. "Hotel rooms in major Chinese cities such as Beijing and Shanghai which have been frequented by foreigners are likely to be bugged. Hotel rooms have been searched while the occupants are out of the room."

The report, which was issued more than a year ago, followed an earlier MI5 letter distributed in late 2007 that warned some 300 leaders of British businesses to be on the lookout for state-sponsored Chinese hackers carrying out electronic surveillance attacks. ®

Mobile application security vulnerability report

More from The Register

next story
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
NEW, SINISTER web tracking tech fingerprints your computer by making it draw
Have you been on YouPorn lately, perhaps? White House website?
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Black Hat anti-Tor talk smashed by lawyers' wrecking ball
Unmasking hidden users is too hot for Carnegie-Mellon
Attackers raid SWISS BANKS with DNS and malware bombs
'Retefe' trojan uses clever spin on old attacks to grant total control of bank accounts
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.