Forest Global Training Partners

Cyber Risks · Krebs on Security

Don’t Be Fodder for China’s ‘Great Cannon’

Summary: Researchers at the University of Toronto's Citizen Lab, the International Computer Science Institute and UC Berkeley reported that China diverted unencrypted traffic bound for Baidu.com, redirecting roughly two percent of requests to serve malicious JavaScript that made visitors' browsers attack Github and greatfire.org. The attack, dubbed the "Great Cannon," intercepted non-Chinese traffic to Baidu properties and ran for several days after Github filtered the malicious traffic.

Key Takeaway: The researchers note that with a minor code change, the same interception could have served browser exploits instead of a denial-of-service script, meaning any unencrypted request a nation-state can tie to your identity is a potential delivery vehicle.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related