Archived link

Estonia has revealed that Moscow was behind a series of cyber attacks targeting several Estonian ministries in 2020, in a rare move that publically accuses another state actor of a cyber attack.

Four years after Estonian ministries’ IT services, including the foreign ministry, were hit by cyberattacks, Tallinn identified the members of Unit 29155 of Russia’s military intelligence service (GRU) as the perpetrators, the prosecutor’s office stated in a press release on Thursday (5 September).

This is the first time the Baltic country has attributed a cyber attack targeting the state to a perpetrator, the statement adds.

“The Prosecutor’s Office sought the arrest of three GRU officers and they are wanted internationally based on the arrest warrant issued by the Harju County Court,” a press release from the Foreign Ministry reads.

Archived link

TIDRONE, a threat actor linked to Chinese-speaking groups, targets military-related industry chains in Taiwan

• TIDRONE, an unidentified threat actor linked to Chinese-speaking groups, has demonstrated significant interest in military-related industry chains, especially in the manufacturers of drones’ sector in Taiwan

• The threat cluster uses enterprise resource planning (ERP) software or remote desktops to deploy advanced malware toolsets such as the CXCLNT and CLNTEND.

• CXCLNT has basic upload and download file capabilities, along with features for clearing traces, collecting victim information such as file listings and computer names, and downloading additional portable executable (PE) files for execution

• CLNTEND is a newly discovered remote access tool (RAT) that was used this April and supports a wider range of network protocols for communication

• During the post-exploitation phase, telemetry logs revealed user account control (UAC) bypass techniques, credential dumping, and hacktool usage to disable antivirus products.

cross-posted from: https://feddit.org/post/2595305

Two sanctioned Russian oligarchs have become part-owners of the UK's largest oil producer after it completed a deal to buy a German firm.

LetterOne, the investment company part-owned by oligarchs Mikhail Fridman and Petr Aven, now owns nearly 15% of Harbour Energy.

LetterOne itself is not sanctioned, and the two Russians have no contact with the firm and don't receive any share of its profits.

Harbour Energy is the largest oil and gas producer in UK waters. It has bought most of the oil and gas production assets of a Germany-based firm, Wintershall DEA, from the chemicals giant BASF.

cross-posted from: https://feddit.org/post/2595155

Archived link

Russian companies have been able to purchase spare parts for outdated microchip-making machines produced by Dutch tech giant ASML through Chinese intermediaries since the full-scale invasion of Ukraine, the Dutch daily Trouw reported Wednesday, citing Russian customs data.

Small Russian importers reportedly obtained these parts at least 170 times between February 2022 and December 2023. Trouw noted that Russian trading firms continued to obtain “countless” spare parts on the secondary market.

The imported parts are suited for ASML machines built from the late 1990s and to the early 2000s, which, according to the report, remain “very useful for chips in everyday devices and weapons.”

Although tools from that era are not considered “dual use” — or technology with potential military applications — Trouw suggested they could still be used in the production of missiles, drones, tanks and military aircraft.

[...]

Archived link

A spokesperson for Raiffeisen said that the Russian court move ruled out a sale of the bank, although they said it would have no impact on the Russian bank’s operations [...]

“We can still appoint management and give instructions to the Russians but we cannot sell the bank,” they said.

[...]

Although Italy’s UniCredit also has a business in Russia and is also under pressure to leave, RBI is far larger and has become a test of Western resolve to end ties with Russia.

Russian authorities had made it clear to RBI, which has around 2,600 corporate customers, 4 million local account holders and 10,000 staff, that they wish it to stay because it enables international payments,

[...]

RBI is a critical financial lifeline for millions of Russian customers who want to send euros or dollars abroad. Western regulators want this to change. The European Central Bank is demanding the bank pare back its Russia business.

With sprawling industrial holdings, more than 18 million customers from Vienna to Moscow and 44,000 staff, Raiffeisen is a financial linchpin for Austria and much of eastern Europe.

Russia has become an even bigger money spinner for the bank since the Ukraine war started in 2022. Russia accounted for about half of the group’s profits in the first three months of this year as fees on payments abroad spiked.

[...]

Two sanctioned Russian oligarchs have become part-owners of the UK's largest oil producer after it completed a deal to buy a German firm.

LetterOne, the investment company part-owned by oligarchs Mikhail Fridman and Petr Aven, now owns nearly 15% of Harbour Energy.

LetterOne itself is not sanctioned, and the two Russians have no contact with the firm and don't receive any share of its profits.

Harbour Energy is the largest oil and gas producer in UK waters. It has bought most of the oil and gas production assets of a Germany-based firm, Wintershall DEA, from the chemicals giant BASF.

cross-posted from: https://feddit.org/post/2595222

Archived link

Japan vowed to bolster military ties with Australia during a high-ranking visit on Sept 5, with Tokyo’s top diplomat saying the “like-minded” partners must stick together to combat shared regional threats.

Foreign Minister Yoko Kamikawa and Defence Minister Minoru Kihara met their Australian counterparts at an old army fort outside Melbourne, striking deals on greater air force cooperation and expanded military exercises.

They also agreed to jointly help the Philippine Coast Guard, which is locked in an escalating tussle with Chinese ships in the disputed waters of the South China Sea.

Major Russian banks have called on the central bank to take action to counter a yuan liquidity deficit, which has led to the rouble tumbling to its lowest level since April against the Chinese currency and driven yuan swap rates into triple digits.

The rouble fell by almost 5% against the yuan on Sept. 4 on the Moscow Stock Exchange (MOEX) after the finance ministry's plans for forex interventions implied that the central bank's daily yuan sales would plunge in the coming month to the equivalent of $200 million.

The central bank had been selling $7.3 billion worth of yuan per day during the past month. The plunge coincided with oil giant Rosneft's 15 billion yuan bond placement, which also sapped liquidity from the market.

"We cannot lend in yuan because we have nothing to cover our foreign currency positions with," said Sberbank CEO German Gref, stressing that the central bank needed to participate more actively in the market. The yuan has become the most traded foreign currency on MOEX after Western sanctions halted exchange trade in dollars and euros, with many banks developing yuan-denominated products for their clients. Yuan liquidity is mainly provided by the central bank through daily sales and one-day yuan swaps, as well as through currency sales by exporting companies.

Chinese banks in Russia, meanwhile, are avoiding currency trading for fear of secondary Western sanctions.

Archived link

Japan vowed to bolster military ties with Australia during a high-ranking visit on Sept 5, with Tokyo’s top diplomat saying the “like-minded” partners must stick together to combat shared regional threats.

Foreign Minister Yoko Kamikawa and Defence Minister Minoru Kihara met their Australian counterparts at an old army fort outside Melbourne, striking deals on greater air force cooperation and expanded military exercises.

They also agreed to jointly help the Philippine Coast Guard, which is locked in an escalating tussle with Chinese ships in the disputed waters of the South China Sea.

cross-posted from: https://feddit.org/post/2595100

Archived link.

Despite increasingly repressive efforts to prevent free expression under the Chinese Communist Party (CCP), dissent in China occurs regularly. Issue 8 of the China Dissent Monitor (CDM), released last week, marked two years of Freedom House’s efforts to monitor these protests. With 6,400 events logged, CDM’s second anniversary is a good occasion to reflect on what we’ve learned about who is protesting in China, what it looks like, where it’s happening, and how often. Here are eight key takeaways.

Dissident occurs regularly, and economic issues play a major role.

Documenting nearly 6,400 dissent events over two years.

• CDM logged 805 dissent events in the second quarter of 2024, a 18 percent increase over the same period in 2023. The majority of events are labor (44 percent) and homeowner (21 percent) protests, with the remainder involving diverse groups like rural residents, students, parents, investors, consumers, members of religious groups, activists, Tibetans, ethnic Mongolians, and members of the LGBT+ community.

• The top regions for protest events were Guangdong (13 percent), followed by Shandong, Hebei, Henan, and Zhejiang. CDM has logged a total of 6,300 cases of dissent since data collection began in June 2022.

• Land grabs and corruption in rural China. CDM documented 228 protests led by rural residents over the past two years, most of which were linked to forced relocation and unfair land acquisition. These cases shed light on the corruption and discontent that arises from widespread land expropriation.

• Over 2,800 protests linked to the struggling property sector. Dissent by homeowners and construction workers constitute 44 percent of all dissent cases in CDM’s database, reflecting the major impact of the real estate crisis on citizens’ livelihoods. Despite central government attempts to abate the sector’s collapse, CDM data indicates that protest frequency has not declined.

Here is the full China Dissent Monitor -- (archived)

Archived link

Russian companies have been able to purchase spare parts for outdated microchip-making machines produced by Dutch tech giant ASML through Chinese intermediaries since the full-scale invasion of Ukraine, the Dutch daily Trouw reported Wednesday, citing Russian customs data.

Small Russian importers reportedly obtained these parts at least 170 times between February 2022 and December 2023. Trouw noted that Russian trading firms continued to obtain “countless” spare parts on the secondary market.

The imported parts are suited for ASML machines built from the late 1990s and to the early 2000s, which, according to the report, remain “very useful for chips in everyday devices and weapons.”

Although tools from that era are not considered “dual use” — or technology with potential military applications — Trouw suggested they could still be used in the production of missiles, drones, tanks and military aircraft.

[...]

Archiv-Link

"Wir unterstützen die AfD mit allen Mitteln": US-Behörden enttarnen den Kreml als Drahtzieher einer jahrelangen Einflusskampagne in Deutschland der rechten AfD

Ein Ziel der Propaganda soll es sein, soziale Konflikte zu schüren.

Die russische Führung hat unter Einsatz erheblicher Mittel versucht, soziale Konflikte in Deutschland zu schüren und Beziehungen zu anderen Staaten zu verschlechtern. Dem US-Justizministerium ist mit Ermittlungen ein Schlag gegen die seit gut zwei Jahren laufende Operation gelungen, die als "Doppelgänger"-Kampagne bekannt ist.

Mit der Kampagne und dazu massenhaft zentral gesteuerten Fake Accounts in sozialen Medien sind seit dem Frühjahr 2022 fast ununterbrochen Texte im Sinne des Kremls verbreitet worden. US-Behörden haben nun Fake Seiten des Netzwerks lahmgelegt – und Beweise vorgelegt, die zeigen: Die Spur zur riesigen Einflusskampagne führt hinauf bis in die Spitze des Kremls. Und: Die Kampagne hat auch zum Ziel, die AfD zu unterstützen.

[...]

Bei aktuellen US-Ermittlungen zu russischer Einflussnahme geht es zum einen um rechte Influencer wie Tim Pool und Lauren Southern, die für Geld aus Russland pro-russische Videos produziert haben. Zehn Millionen US-Dollar sollen dafür geflossen sein.

Etwas weniger Beachtung finden in der US-Öffentlichkeit dabei mindestens genauso brisante Erkenntnisse, die Europa und vor allem Deutschland betreffen.

[...]

Für diese Operation wurden zahlreiche Webseiten internationaler Medien unter sehr ähnlich wirkenden URLs nachgebaut und mit pro-russischen Fake News versehen. Betroffen war auch t-online. Das FBI hat den Unterlagen zufolge vier Onlineprofile identifiziert, die genutzt wurden, um Internetadressen für falsche t-online- oder "Spiegel"-Seiten zu generieren.

Verbreitet wurden die Inhalte dort dann von automatisierten Profilen über soziale Medien. Eine eindrucksvolle Zahl zum Ausmaß dieser Kampagne hat im Januar das deutsche Außenministerium geliefert: Alleine im Zeitraum vom 20. Dezember 2023 bis 20. Januar 2024 wurden demnach mehr als eine Million deutschsprachiger Tweets abgesetzt. Stimmung gemacht wurde gegen die Ukraine, gegen die USA und die Nato.