Menu
Navigation

Global articles on espionage, spying, bugs, and other interesting topics.

Keep abreast of the espionage threats facing your organisation.

Beware the SMS of Death

One of the more common predictions for 2011 among industry-watchers is that smartphone malware will become more common as smartphones grow more popular. But even feature phones are vulnerable to attacks.

Weā€™ve already seen hacks that purportedly allow people to eavesdrop on GSM voice calls. Now researchers in Germany say feature phones can be shut down and knocked off the network via SMS attacks.

Collin Mulliner and Nico Golde ā€“ students in the Security in Telecommunications department at the Technische Universitaet Berlin ā€“ have demonstrated a so-called ā€œSMS Of Deathā€ attack on feature phones made by LG, Motorola, India-based Micromax Nokia, Samsung and Sony Ericsson that exploits the ability of the SMS protocol to send “binaries” (small programs) to the handset.

Cellcos use this function to remotely change phone settings, but attackers can use it to send malicious messages that can shut down the phones. While the attack requires the attacker to know the type phone someone is using, they can easily send five malicious SMSs targeting the top five handset models in that market and knock large numbers of users off the network, according to Technology Review.

The availability of Web-based bulk SMS services make this kind of attack both cheap and easy, Mulliner says.

Cellcos have two options to prevent such an attack, according to the TR report: update the firmware of existing phones, or filter SMS traffic for malware, the latter of which is tough because SMS filters are designed to block spam, not binaries.

Updating phone firmware is also a tough haul, AurĆ©lien Francillon, a researcher in the system security group at ETH Zurich, tells TR: “Most of those phones don’t have automated updates, and when they do, patches are not made available quickly.”
Ā 


Press 1 to eavesdrop


Paola Totaro reports on the scandal that rocked Fleet Street, spread to Downing Street – and threatens Rupert Murdoch’s TV expansion plans.

Four years ago, almost to the day, a jowly Fleet Street veteran and an angular, young-gun private investigator stood in the dock at the Old Bailey. Eyes downcast, they apologised to the princes, William and Harry, for ”gross invasion of privacy” and then braced as the judge sentenced them to several months in jail.

The two men, News of the World royals reporter Clive Goodman and investigator Glenn Mulcaire, then quietly disappeared behind bars. Their boss, editor Andy Coulson, fell on his sword – denying all knowledge of his reporter’s use of the ”dark arts” but taking “ultimate responsibility” for the illegal hacking of royal aides’ voicemail.

A spate of ugly headlines and a public brouhaha ensued but that, the protagonists and their News International bosses hoped, would be the end of the affair.

This week, however, the scandal re-exploded with unexpected force, spreading the potential for collateral damage far beyond the newsroom of the controversial tabloid, Britain’s best-read paper.

Scotland Yard has been forced to launch a new investigation. The Prime Minister, David Cameron, lost Andy Coulson, his communications director and a key adviser at No. 10 Downing Street and the paper’s news editor, Ian Edmondson, was sacked as court documents revealed the paper’s hacking may have continued well into last year.

As the Crown Prosecution Service begins to sift through existing – and new – evidence, a long list of high-profile personalities, from actors and sports stars to MPs and former cabinet ministers, are furiously lining up in the civil courts to test whether they have been phone hacking victims, too.

The consensus in London is that by the time the scandal is laid properly bare, few newspapers will emerge untainted.

Alastair Campbell, Tony Blair’s communications director – himself dubbed the master of the dark arts of political spin – told the Herald this week that the affair has the potential to tip ”the whole newspaper industry” into its own version of the MPs’ expenses scandal. News of the World, he warned, should not be the only paper to fear that ”squeaky bum time is looming”.

The Guardian, Campbell said, has been an almost solitary voice pursuing the hacking allegations while other newspapers have been ”itching to will it away”. He cited a thundering editorial in the Daily Mail this week, which suggested that Coulson’s departure from Downing Street should represent the ”end of the matter”.

”I wonder why?” Campbell said. ”Could it be, as one or two of the papers finally seem to be suggesting, that far from this being a story of one rogue reporter at one Sunday newspaper, it is a story of a newspaper industry out of control, and losing sight of the importance of the law.

”Coulson’s departure from No. 10 is just one rather dramatic chapter. But the real issues go far wider and deeper than one job in Downing Street ā€¦ they’re about the conduct of newspapers, the conduct of the police, and the implications for News Corp’s attempted buy-out of BSkyB.”

In the House of Lords on Thursday, Lord Fowler, a former journalist and minister in the Thatcher government, demanded a full-scale, independent investigation: ”Do you remember the Watergate scandal when one brave newspaper protected the public interest?” he said. ”Has not exactly the opposite happened in the phone hacking scandal where you have one newspaper, and possibly others, not exposing injustice but instead directly conspiring against the public?”

The affair resurfaced due to tenacious investigative work, principally by The Guardian and its investigations editor, Nick Davies, and last year, across the Atlantic, a powerful magazine piece by an investigative team on The New York Times.

These, of course, are media rivals of Rupert Murdoch’s most influential and important titles, Britain’s The Times among them. This has been a mantra, frequently repeated in off-the-record comments attributed to News Corporation or its allies.

In public, News’s defence, at least until now, has been consistent and focused on the corporate belief that phone hacking of message banks had been the work of just one rogue reporter, done without the knowledge of superiors and executives.

But behind the scenes, it has become apparent that the full force of News International has been unleashed to defend the media giant as it moves into the final negotiations of a plan to buy the remaining 61 per cent of the satellite broadcaster, BSkyB in a Ā£7.5 billion ($11.9 billion) deal. Murdoch has been reported to have expressed his fury that an internal clean-up of the mess was not instituted sooner.

Opposition to the BskyB plan was well known: when news of the proposed takeover broke last year, rival media outlets, including the BBC and The Guardian reacted vocally, arguing News International would dominate Britain’s media landscape even further – it already controls one-third of national newspaper circulation and its broadcasting arm has a turnover of Ā£5.9 billion, compared with the BBC’s Ā£4.8 billion.

This makes Coulson’s shock departure from Downing Street all the more significant. It happened just days before Murdoch was due in London for key discussions before jetting off to the World Economic Forum in Davos – a plan he jettisoned at the 11th hour, fuelling further conjecture that Coulson’s immolation formed part of the damage control strategy.

In an intriguing blog midweek, Robert Peston, the BBC’s high-profile and well-connected business editor, anticipated the launch of what is shaping up to be a ferocious, behind-the-scenes PR strategy in which News Corporation aims quickly to clean out its own Augean stables but is unlikely to hold back from sharing the pain of being the only one caught out.

Peston likened it to the BP oil spill strategy, one in which ”company suffers a disaster; company offers comprehensive financial settlement to victims of the disaster; company admits to its own shortcomings, but implies that an entire industry has also engaged in similar flawed practices”.

News Limited executives, he said, had told him they are now hell-bent on ”finding out everything they can about who was hacked by the News of the World ā€¦ and who at News International knew about the hacking”.

Once the details are known, News is poised to offer ”settlements to those celebs, politicians and others whose privacy may have been invaded – to cut out the requirement for huge lawyers’ fees. Any culpable News International executives will be sacked.

”They tell me all of this could happen in a matter of weeks. And, not too subtly, the message will be sent out that if News International’s Augean Stables have been cleaned, what about the stench from other media groups? Because, as I’ve mentioned before ā€¦ there was a period at the start of this century when questionable techniques to obtain stories were employed by a number of newspapers.”

On Thursday, The Times, reticent until now in its coverage of the affair, ran a big story that News International ”will take swift and decisive action when we have proof of wrongdoing”.

Under the headline ”Newspaper phone hacking widespread”, News turned its sights on the rest of Fleet Street. Quoting the lawyer Mark Lewis, who is acting for celebrities who also claim to be phone hacking victims (among them Sienna Miller), the practice was described as widespread ”almost kids’ playtime”. ”It was such a widespread practice. I am absolutely positive – and I am not an advocate for the News of the World – that this wasn’t a practice for one newspaper or even one newspaper group,” Lewis told The Times.

It may seem surprising but there has long been official concern that Fleet Street has practised questionable – and often illegal – ”dark arts” to break news. The extent of such practices has been the cause of anxiety for, and the focus of forensic investigative work by, Britain’s Information Commissioner. In 2006, the commissioner’s office released a report, What Price Privacy, which even recommended a new penalty regime, including increasing terms of imprisonment for infringements to two years.

More extraordinary is that at the time the News of the World man and his private investigator were awaiting sentencing four years ago, the commissioner released a second report that further investigated the organised trade in confidential data – naming 31 publications that dealt with a firm of private investigators in Hampshire.

The top offender, with 952 transactions, was the Daily Mail.

But the list included titles as diverse and serious as The Observer and The Sunday Times along with myriad London tabloids, smaller regional papers including the Irish edition of the Daily Mail and magazines Marie Claire and Woman’s Own.

The dark affair began in the most banal way in 2005. Odd stories began appearing in the News of the World about Prince William, snippets as silly as his visit to a knee surgeon for a damaged tendon. At the same time, royal staff started noticing that mobile phone messages appeared to have been listened to – when the individuals concerned knew they had not retrieved them.

Scotland Yard began investigating Buckingham Palace aides’ suspicions and it did not take too long for the trail to lead to Mulcaire, a former footballer turned investigator, and Goodman, his royals reporter partner-in-crime. As Scotland Yard turned its surveillance to the suspects’ own phones, a rival paper, The Sun, scooped News of the World with the tale of Prince Harry visiting a strip club. (The unforgettable headline: ”Harry buried face in Margo’s mega boobs, Stripper Jiggled, Prince Giggled”.)

Clearly oblivious to the police investigation, Goodman followed up with an article of his own which not only reported Prince Harry’s girlfriend’s distress about the incident but also quoted verbatim a voicemail that Prince Harry had received from his brother, teasing him about the story.

By then, however – and this really only become known in July 2009 when The Guardian delved back into the story – Scotland Yard’s own investigations had found that it was not just the royal family whose privacy had been invaded. Actors, government ministers and their aides, MPs, football stars and even some News of the World staff had been hacked, too.

According to The Guardian’s investigation, the cache seized by police from Mulcaire included 4332 names or partial names, nearly 3000 mobile phone numbers, 30 audio tapes and 91 PIN codes of the type needed to get into the voicemails of the minority of targets who took the trouble to change the factory settings on their mobile phones.

Britain’s legendary police force – whether by choice or circumstance – chose to focus solely on the royal case, using the jailing of Goodman and Mulcaire as a lesson and dumping the rest.

This was despite the possibility of literally thousands of potential hacking victims – and a tape on which Mulcaire is allegedly heard walking a journalist through how to hack into the voicemail of a football official. Scotland Yard, a growing chorus of critics says, simply did not bother to pursue the myriad leads that have now shown that the country’s most popular newspaper was spying on its citizens.

On Thursday, when things apparently could not get any worse, High Court documents revealed that the hacking may have continued as late as last year and that Sienna Miller’s former stepmother, a London interior designer, is also suing the News of the World and one of its journalists for hacking into her messages between June 2009 and March 2010. The reporter involved was suspended last year but, until now, the details of the case had been concealed by court orders.

News International has robustly denied the claim, insisting it knows of no such evidence. The reporter himself apparently said he dialled the number normally but gained accidental access to the voicemail when his fingers got stuck on the keys.

For Scotland Yard, the latest revelations represent an additional, serious political problem as both sides of politics unite in outrage. The former deputy prime minister, Labour’s John Prescott, has demanded a judicial review of the police handling of the case, warning Labour does not ”trust the Metropolitan Police to conduct a proper inquiry”.

Tory MP John Whittingdale, the chairman of the parliamentary select committee on culture, echoed his sentiments, warning the police they have ”serious questions” to answer and accusing them of accepting News International’s excuse of just one rogue reporter.

”This has all come about on the basis of information which was available to police five years ago,” he said, demanding to know why they did nothing with the information. ”I would say this raises very serious questions about thoroughness and attitudes of the Met police at the time.”

And now, solicitor Mark Lewis, – who obtained a whopping settlement from the News of the World over the hacking of the phone of Gordon Taylor, the chief executive of the Professional Footballers’ Association – is lining up to present cases for numerous clients who all allege an unlawful breach of privacy, many of them against media groups other than News International.

The publicist Max Clifford – who also had received a million-pound pay-out to buy his silence – this week stated categorically and in public that the practice was widespread.

Lewis has apparently described the claims made by his clients as ”pretty hair-raising”, opening another Pandora’s Box that suggests it might be timely for all media groups – and in the end, everyone knows who they are – to muck out their own stables, quick smart.


Top banker ‘listened for tips in City pubs and spied on colleagues to make Ā£590,000 profit…

By Daily Mail Reporter
Last updated at 5:05 AM on 1st February 2011

A high-flying City banker gave his barrister wife and her friend
sensitive information on takeovers to help them make almost Ā£600,000
from insider dealing, a court heard yesterday.

The three invested more than Ā£2million in shares on the London Stock
Exchange between 2000 and 2008, netting a total profit of Ā£590,000.

Christian Littlewood, 37, worked for German investment bank Dresdner
Kleinwort Wasserstein from 1998 until 2007, when he was made redundant.

Christian Littlewood

Angie Littlewood

Christian Littlewood (left) invested Ā£2,150,000 and made a profit of Ā£590,000 for himself, his wife, Angie Littlewood (right) and a friend through inside trading

He was privy to inside information on takeovers and passed it to his wife. The court heard he didnā€™t just use information he had been given ā€“ he also spied on colleaguesā€™ computers and eavesdropped.

During his career he rose up the ranks, and was director of strategic banking by the time he left.

His expertise was in mergers and acquisitions and he passed on information about firms which were about to be taken over to his wife, Angela, 39, and her friend Helmy Saā€™aid, 34. Mrs Littlewood and Saā€™aid, owner of a juice bar, would invest in shares prior to takeovers, selling after the deals for a profit.

Southwark Crown Court heard that in March 2000 Littlewood began passing insider information to his spouse, a Singaporean national. She used her Singaporean name to trade, which was ā€˜convenientā€™, as it could not be linked easily to her husband.

Littlewood, who was earning Ā£350,000 a year, including bonuses, in the last years of his employment, used knowledge he legitimately had, as he was ā€˜insideā€™ deals done through his bank.

Nicholas Dean, QC, prosecuting, said: ā€˜While Christian Littlewood was the instigator of the scheme, neither his wife nor Mr Saā€™aid needed much persuasion. They became active participants.

ā€˜Over a period of nine years they invested a total of Ā£2,150,000, making a profit of Ā£590,000.ā€™

Mr Dean added that over the period Littlewood had been involved with investments in 56 stocks, 50 of them involving his co-defendants. But the three are only being sentenced in relation to the eight counts on the indictment.

Following his redundancy, Littlewood began working for another bank, Shore Capital. He fed information from the first deal he was involved in to his wife and Saā€™aid. The Littlewoods, who have three children, were arrested at their London home on March 31, 2009.

Saā€™aid was held on the Indian Ocean islands of Mayotte in May last year.

The couple pleaded guilty to eight counts of insider trading in October. Saā€™aid admitted the same charges just before trial on January 10. Lord MacDonald QC, defending Littlewood, said that, although his client ā€˜lit the touch paperā€™, he did not know the extent to which his wife and Saā€™aid were investing.

The three will be sentenced later this week. Saā€™aid is in custody and the Littlewoods are on conditional bail.


More heads roll at NJ’s largest sewerage agency


NEWARK, N.J. ā€” State Police have taken over security at New Jersey’s largest sewerage authority after a small hole was found drilled into the executive director’s office.

Officials say the hole would allow anyone to eavesdrop on Passaic Valley Sewerage Commission director Wayne Forrest from a storeroom below.

The embattled agency’s chief financial officer Kenneth Pengitore abruptly resigned from his $163,869-a-year job Wednesday. Forrest also fired five other employees, including the wife and brother of a former commissioner.

Forrest said the actions were necessary to restore public trust and accountability.

The resignation and terminations followed the arrests Tuesday of three top-level executives. They’re charged with official misconduct for allegedly using employees to perform personal home improvements and repairs during work hours.


Curling fans will finally get to eavesdrop

Indeed, coming to you at the Continental Cup in St. Albert this week is an experiment which Warren Hansen of the Canadian Curling Association believes will be the future.

“I think if all of this works well, fans will soon be able to listen to what’s going on with the curlers as they discuss shot strategy on every sheet.

“It’s progressing there in our minds right now. We’re just not sure how quickly things will be able to move.

“We will be experimenting with getting the transmitter situation correct at the Continental Cup so the special FM radio bugs will be able to be used at the Scotties in Charlottetown and the Tim Hortons Brier in London.

“For the Continental Cup, anyone who brings an FM radio to the venue can easily tune into the TSN commentators on the broadcast. We’ll get this up and running by the Scotties where fans will be able to either bring their own radio or purchase one of the inexpensive headsets from from our merchandise area.”

Curling TV numbers have become the phenomenon of the sports world.

Indeed, four of the teams competing for the Continental Cup — Canada’s Kevin Martin, Norway’s Thomas Ulsrud, Germany’s Andrea Schopp and Canada’s Cheryl Bernard — all played before almost seven million on Canadian television alone during the gold-medal games of the Vancouver 2010 Olympic Winter Games.

As was the case with the Torino 2006 and Salt Lake 2002 Olympics, the TV numbers reported around the world were mind boggling for the often ridiculed sport where they throw rocks at houses and sweep pimpled ice with brooms.

“The use of rf mics is what has set curling apart from all other sports and has been a contributing factor to the large television numbers we enjoy today,” Hansen, a former Brier winner curling with Hec Gervais, who also won three Little Grey Cups playing football with the Edmonton Huskies.

“We also allow the cameras in very tight on the curlers so someone sitting in their living room feels as if they are right there in the conversation between the skip and vice skip.

“It is the only sport where the television viewer feels as if they are in the midst of the action. I believe the result is that it has brought in a great many viewers who otherwise may not be there.”

The trouble is, it meant that the guy watching at home for free on TV was, although missing the live atmosphere and the experience of being there, which was phenomenal at the Vancouver Olympics, was being cheated out of the thing which has made the sport compelling on TV.

This will now bring that component into play for those sitting in the stands.

“Our initial plan is to easily make it possible for all fans to listen to the FM signal provided by TSN. Making the rf mics available on every sheet would be the next step. but we aren’t there yet.”

If this becomes a part of the live curling experience, it will be a legacy of the Vancouver Olympics where the bugs were made available to the crowd and Edmonton radio host Jackie Ray Greening, the organizing committee chairman of the 2005 Brier, 2007 Worlds and 2009 Olympic Trials here, delivered a running commentary to the crowd, directing their attention from one sheet to the other.

“The experiment with Jackie Rae worked very well, which is why we’re expanding the idea this year with plans to create something even more extensive for the future.

“I thing one of the reasons it was especially popular in Vancouver was because a large percentage of the audience was not very familiar with curling,” said Hansen.

“Actor Donald Sutherland was at the venue a lot in the latter days and he always had on a headset.”

Follow me on Twitter.com/sunterryjones