Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

2/8/2010
02:21 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

China Closes Hacker Training Site

The arrests, which took place before Google revealed that it had been targeted by a cyber attack from China, reflect growing concern about internal cybercrime.

China's largest training Web site for hackers has reportedly been shut down following a major raid by authorities in China's Hubei Province.

Late last year, some 50 police officers arrested three individuals associated with the Black Hawk Safety Net (3800cc.com), a group that allegedly sold training materials and malicious code for illegal hacking, according to reports in China's state-run media.

About 1.7 million yuan ($249,000) of the group's assets were frozen, according to the English-language China Daily.

Established in 2005, Black Hawk Safety Net counts over 170,000 non-paying members and about 12,000 people with paid memberships.

It's not immediately clear why it had taken until now for Chinese authorities to disclose the arrests.

The news comes after Google last month said that in December it "detected a highly sophisticated and targeted attack on our corporate infrastructure originating from China that resulted in the theft of intellectual property."

As a consequence of the attack and separate efforts by online attackers to compromise the Gmail accounts of Chinese human rights activists in China, Europe and the U.S., Google said it would stop censoring Google.cn, a promise it has yet to fulfill.

The U.S. State Department subsequently asked the Chinese government for an explanation of the attacks.

Authorities in China responded that hacking is illegal in China, that the country welcomes law-abiding companies, and that China, more than the U.S., is the largest victim of hacking attacks. China's computer security organization, the National Computer Network Emergency Response Coordination Center of China, claims that hackers in the country caused 7.6 billion yuan ($1.1 billion) in damage last year.

Joe Stewart, a cybersecurity researcher for SecureWorks who linked the Google attacks to China, doubts the arrests will have much impact. "I guess it helps China save some face in light of all the disclosures coming out of China," he said in a phone interview. "I don't know that it will do very much about cybercrime."

Scott Henderson, who tracks the Chinese hacking scene on a Web site called The Dark Visitor, observes that the crackdown follows from an investigation of a cyber attack that took down Internet access in the Chinese city of Macheng for three days. One of the hackers responsible had commercial ties to one of the men associated with Black Hawk Safety Net.

"The unwritten rule among Chinese hackers is never hack inside China," he said in an e-mail. "As disposable income becomes more abundant, groups are starting to break that law and Beijing is cracking down on them. Laws against domestic hacking have been strengthened with longer prison sentences for violations."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
A Realistic Threat Model for the Masses
Lysa Myers, Security Researcher, ESET,  10/9/2019
USB Drive Security Still Lags
Dark Reading Staff 10/9/2019
Virginia a Hot Spot For Cybersecurity Jobs
Jai Vijayan, Contributing Writer,  10/9/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
2019 Online Malware and Threats
2019 Online Malware and Threats
As cyberattacks become more frequent and more sophisticated, enterprise security teams are under unprecedented pressure to respond. Is your organization ready?
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-17612
PUBLISHED: 2019-10-15
An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the _list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter.
CVE-2019-17613
PUBLISHED: 2019-10-15
qibosoft 7 allows remote code execution because do/jf.php makes eval calls. The attacker can use the Point Introduction Management feature to supply PHP code to be evaluated. Alternatively, the attacker can access admin/index.php?lfj=jfadmin&action=addjf via CSRF, as demonstrated by a payload in...
CVE-2019-17395
PUBLISHED: 2019-10-15
In the Rapid Gator application 0.7.1 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.
CVE-2019-17602
PUBLISHED: 2019-10-15
An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The OPMDeviceDetailsServlet servlet is prone to SQL injection. Depending on the configuration, this vulnerability could be exploited unauthenticated or authenticated.
CVE-2019-17394
PUBLISHED: 2019-10-15
In the Seesaw Parent and Family application 6.2.5 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat.