Cyberattack

Bangkok, May 3, 2013--Malaysian online news sites say access to their websites is being disrupted in the run-up to the general elections scheduled for Sunday.

New York, May 2, 2013--The Guatemalan news outlet elPeriódico has been targeted in a series of cyberattacks as it published stories alleging corruption in President Otto Pérez Molina's administration. The Committee to Protect Journalists calls on authorities to investigate immediately and put an end to the harassment.

Cyberattacks on news websites and apparent government hacking into journalists' email accounts have raised new questions about the integrity of media reforms in Burma. The New York Times reported on Sunday that several journalists who regularly cover Burma-related news recently received warning messages from Google that their email accounts may have been hacked by "state-sponsored attackers."

The New York Times reported Thursday that, after four months, it has expelled what it believes to be China-based hackers from its computer system and has, so far, kept them from breaking back in. The paper said a group had been "infiltrating its computer systems and getting passwords for its reporters and other employees." The paper linked the attacks to a Times investigation, published in October, finding that the relatives of Prime Minister Wen Jiabao "had accumulated a fortune worth several billion dollars through business dealings."

On September 12, Vietnamese Prime Minister Nguyen Tan Dung issued an administrative order--number 7169--accusing us, Danlambao, of "publishing information that is false, fabricated, and untruthful to slander the leadership of the nation, to agitate the people against the Party and the State, to cause doubts and create bad publicity reducing the people's trust in the state leadership." The order directed the Ministry of Public Security and the Ministry of Information Communication and Media to investigate and discipline any groups or individuals who affiliate with Danlambao.

Record-high temperatures swept most of Europe this summer, but in Moscow the weather, much like the political climate, was chilly. I spent three months in the capital at the invitation of the Russian Union of Journalists, and witnessed how Vladimir Putin's third term in office kicked off with the passage of restrictive laws, harassment and prosecution of dissent, the jailing of an irreverent punk-rock band, and death threats by a top-ranking official against a prominent editor. 

We talk a lot about hacking attacks against individual journalists here, but what typifies an attempt to access a reporter's computer? Joel Simon, CPJ's executive director, received an email last week that reflects some characteristics of a malware attack against a journalist or activist. There was nothing particularly notable about the targeting. (Like many reporters, CPJ receives such attempts occasionally). The attack failed at the first fence, and my casual investigation into the source was inconclusive. There are no shocking answers or big headlines to draw from this attack. But it does illustrate a contemporary reality: Opportunistic assailants regularly shower journalists with software attacks.

Some journalists continue to receive the warning from Google about state-sponsored attacks that we mentioned last week. The message appears on top of logged-in services like Gmail. Occasionally it will disappear for a few hours and then reappear, but there is no way to remove it.

The Russian manufacturer promises results. The software can be used to control your own or, say, a customer's computer by making it a remote software client. Or it could be used for spying on others.

The last few weeks have offered the strongest indications yet that nation-states are using customized software to exploit security flaws on personal computers and consumer Internet services to spy on their users. The countries suspected include the United States, Israel, and China. Journalists should pay attention--not only because this is a growing story, but because if anyone is a vulnerable target, it's reporters.