
Kaspersky laboratory specialists discovered a targeted viral attack on human rights defenders who are involved in the problems of Chinese Tibet and Sinjan-Uyghur Autonomous Region.
Email of one of the famous activists of the movement for free Tibet was hacked. From his address, other human rights activists sent letters of thanks for participating in the World Uyghur Congress. A file with the application archive was attached to the letter.
If the recipient clicked on the file, then a program was installed on his smartphone, which immediately began to collect data from the notebook, downloaded the history of calls and SMS, as well as a variety of geolocation information. The owner of the device saw only a harmless text with an invitation to the next congress.
All stolen data were sent to the server in the United States, registered for a Chinese company. Of course, it is impossible to clearly talk about the involvement of the Chinese government in the attack. However, it looks extremely suspicious.