According to Facebook, the Chinese cyber espionage operation targeted Uyghur Canadians

Facebook Canada said it would notify “fewer than 20” people in Canada that they would be targeted.

The company claimed to have tracked down the malware used by hackers, known as Earth Empusa or Evil Eye, of two companies in China. Facebook said it was unable to determine if the Chinese government was involved.

“This group used various electronic espionage methods to identify their targets and infect their devices with malware to enable surveillance,” writes Mike Deviliansky – Facebook’s head of cyber espionage investigations – and the company’s security policy chief, Nathaniel Gleicher. , In a media release.

“This activity had the hallmarks of a continuous process with sufficient resources, behind which no one stands.”

Facebook said the operation targeted Uyghurs from the Chinese province of Xinjiang who live in Canada, the United States, Turkey, Kazakhstan, Syria, Australia and other countries.

Fake accounts, fake sites

Facebook said the deal used a variety of technologies to reach the people it was targeting. The company said the hackers had created Facebook accounts pretending to be “journalists, students, human rights defenders, or members of the Uyghur community to build trust with people who targeted them and tricked them into clicking on malicious links.”

Facebook said it had also created malicious sites similar to Uighur sites or popular Turkish news sites and launched “attacks on water wells” to infect visitors to legitimate sites.

Facebook claimed that the hackers have also created fake third-party stores with Uyghur themed apps that contain malware. It includes a keyboard app, prayer app, and dictionary app.

Facebook said: “To stop this process, we banned the sharing of malicious domains on our platform, removed the group’s accounts and informed us of the people we believe have been targeted by this representative.”

Ivan Koronovsky is the spokesperson for Communications Security Corporation, Canada’s cyber espionage agency. He said CSE welcomes Facebook’s move to halt its cyber espionage campaign in China.

“It is almost certain that online external influence campaigns will continue and will not be limited to major political events such as elections,” he wrote in an email response. “Online foreign influence activities are a new normal and opponents seek to influence national events as well as influence international discourse on current events.”

CSE officials are expected to testify before a parliamentary committee on Canada-China relations on Thursday.

The news of the cyber espionage operation comes in the same week that Canada and other countries punished four Chinese officials for human rights violations in Xinjiang. The Canadian Organization for Global Affairs said Beijing had arbitrarily imprisoned more than a million people on the basis of their religion and ethnicity.

It also comes a month after the House of Commons voted to declare China’s actions in Xinjiang “genocide.”

Muhammed Tohti, executive director of the Uyghur Rights Defense Project, said that Chinese authorities have long since targeted nearly 2,000 members of the Uyghur community in Canada. He said what Facebook posted today is more complicated than previous tactics, such as sending emails that appear to be from a friend and encouraging people to click on links.

Tohti said he has not heard from anyone Facebook has contacted with yet, adding that many Canadian Uyghurs are already worried about social media and all the apps from China.

Canadians are rightly concerned

Michael Chung, a conservative critic of foreign affairs, said it was “too late” for Prime Minister Justin Trudeau’s government to act.

“The constant threats and intimidation by the Chinese regime against Canadians and those who live here at home are unacceptable,” he said. “The Trudeau government has yet to come up with a robust plan to counter these threats and intimidation, although the House of Commons adopted a conservative proposal on November 18, 2020, calling on the Trudeau government to do exactly that.”

Jack Harris, the NDP’s foreign affairs critic, said the government and Facebook should do more to stop cyber espionage in Canada.

Harris said: “Canadians are really concerned and it is unacceptable that this kind of surveillance takes place in Canada.” The liberal government is obligated to demand that Facebook and other social media giants make sure that it is not used as a tool by authoritarian governments.

“We are told that there are legal tools the government can use to protect Canadians from harassment and surveillance in Canada. Having stricter laws for companies like Facebook is a necessary starting point.”

Elizabeth Thompson can be reached at [email protected]