Hackers Clash Over China's Rule in Muslim Province

Pro-China and pro-Muslim hackers have clashed online in a series of attacks on Web sites triggered by deadly ethnic riots in China's Muslim region last month.

By Owen Fletcher
Fri, August 14, 2009

IDG News Service — Pro-China and pro-Muslim hackers have clashed online in a series of attacks on Web sites triggered by deadly ethnic riots in China's Muslim region last month.

Messages left on defaced Web sites have either supported or condemned China's rule over Xinjiang, the western province where rioting killed nearly 200 people. Chinese government Web sites have become the latest targets, adding to online attacks against an Australian film festival and a Turkish government site.

Searches on Friday revealed a dozen Web sites of local Chinese government offices that had been defaced with messages in support of the country's Uighur ethnic minority group. The Uighurs, a mostly Muslim group native to Xinjiang, have complained of poor protection of their culture and a lack of economic opportunity as China has encouraged migration to Xinjiang by Han Chinese, the country's large ethnic majority. Uighurs and Han Chinese carrying sticks and shovels hunted each other in packs during the rioting last month, which was triggered by an ethnic brawl in far-away southern China that left two Uighurs dead.

Messages on some of the defaced Web sites called China's policies toward Uighurs "genocide," and images left behind included the flag of the region's independence movement.

Hacking activities that support Uighurs have been uncommon, though local Chinese government Web sites are often defaced.

"Honestly, I've never seen or heard of a pro-Uighur hacker before," said Scott Henderson, the author of a blog that covers Chinese hackers, in an e-mail. "That was really unusual."

Chinese Web sites are often hacked, due mainly to weak security, Henderson said.

Pro-China hackers last month defaced the Web sites of the Turkish Embassy in China and the Melbourne International Film Festival. The embassy was targeted after Turkish officials criticized China following the unrest in Xinjiang, and the film festival was targeted as it prepared to show a documentary about Rebiya Kadeer, a Uighur leader accused by China of organizing the riots.

Attackers placed the Chinese flag and messages blasting Kadeer on the film festival Web site, and later organized a flood of the festival's online ticketing system that left the showing of the Kadeer documentary sold out.

Uighurs have links to Turkey, including their Turkic language and practice of Islam. Greater autonomy for Xinjiang and Tibet, among the most politically charged issues in China, is hotly opposed in the media and much of the country's populace.

Patriotic Chinese hackers have launched attacks on foreign Web sites before, including against CNN last year over its coverage of an uprising in Tibet.

The attacks this time seem to follow the usual pattern, Henderson said.

"When questions of sovereignty arise, the government issues a strong statement against the action, and the Chinese hackers find a way to give it an exclamation point," he said.

The attacks appeared to be done by individuals, though the mass ticket purchase was more clever and could have been social mobilization rather than a hack, Henderson said.

China blocked all Internet access in Xinjiang after the rioting last month, and Twitter and Facebook have been inaccessible across the country since the days following the event. China said late last month it had started restoring Internet access in the province only for certain businesses.

As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable, enforceable processes that reduces administrative overhead and enables robust, customizable reporting and auditing capabilities. Brought to you by NetIQ.
Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring (FIM) tools that provide immediate alerts. This white paper has been brought to you by NetIQ, the leader in solving complex IT challenges.
Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in organizations worldwide. This white paper from NetIQ, discusses key technology solutions that help to prevent and detect insider threats.
This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into creating a compliant and secure IT environment. Follow these four proactive steps now before your next audit. Brought to you by NetIQ.
Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will help your business gain the maximum return on investment possible while aligning your compliance programs.
This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make to help achieve project success.
Learn how Gartner's criteria for next generation IPS helps organizations achieve effective threat prevention despite changes in network communications, new applications, and changes in the threat landscape.
3 minute Flash video - overview of the need for and value of Configuration Control.
Cloud deployments are playing a critical role in propelling innovation for many companies. At the same time security has become the #1 one of the top concerns for IT and business leaders as they migrate into the cloud. In this webinar, learn from Accenture discusses how to recast the cloud as a "fresh chance to rethink your approach to security."
As greater numbers of datacenter servers transition from the physical to the virtual world, the components of virtualization success come to the fore. What scores of organizations have discovered is that success is derived from an optimal pairing of the right software platform with the right hardware platform.
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Resource Center