Thursday, February 6, 2025
HomeHacksFacebook Blocks Chinese Hackers Using Fake Person as Targeting Uyghur Activists

Facebook Blocks Chinese Hackers Using Fake Person as Targeting Uyghur Activists

Published on

SIEM as a Service

Follow Us on Google News

The security experts and analysts from Facebook threat intelligence team has recently worked together to detect and stop a huge range of threat.

The threat that is being detected is known as “Earth Empusa” or “Evil Eye” in the industry of security. However, this threat includes cyber-espionage campaigns, influence operations, and much more.

Not only this, as the threat actors of this recent flaw, nation-state actors and many other groups are continuously hacking and exploiting Facebook’s platform.

The analysts have asserted that this is not the first time when hackers have been arrested for such activity. The news got spread all over the internet, and the social media company affirmed that the hacker had targeted the activists, dissidents, and journalists who were predominantly Uighurs.

Uighurs are a largely Muslim ethnic group that is continuously facing persecution in China; however, Uighurs belong from the north-western region of Xinjiang in China.

The ones who got targeted are currently abiding in places that include Turkey, the United States, Australia, and Canada.

TTPs Used by the Threat Actors

Here are the TTPs that are used by the hackers in this threat are mentioned below:-

  • Selective targeting and exploit protection
  • Negotiating and representing news websites
  • Social engineering
  • Using fraudulent third-party app stores
  • Outsourcing malware development
  • Industry tracking

Moreover, the western government is continuously trying to hold Beijing accountable for the mass detainments of all Muslim Uighurs. After all the claims, China simply denied all the accusations of abuse. 

China also proclaimed that it had executed different camps, and all these camps implement vocational training and are required to fight extremism. Not only this, but according to the report, nearly 1 million people, and the majority of people belong to Uighurs, have been arrested in the Xinjiang camps.

Moreover, after a proper investigation, the report came, and it states that China is facing criticism from all over the world because of the way they have treated the mostly Muslim Uighur community in Xinjiang.

Not only the cybersecurity experts but the rights groups also consider that China has restrained more than a million Uighurs over the past few years.

Facebook declared that this hacking group has used fake accounts to pretend as fictitious journalists, students, rights advocates, or Uighurs so that they can build trust with their targets and can easily deceive them into clicking all the malicious links.

Apart from all these things, Facebook has also discovered a website that was generally performed by the group to simulate the third-party Android app stores along with Uighur-themed apps, such as prayer app, that contain the malware.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity, and hacking news updates.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

OpenAI Data Breach – Threat Actor Allegedly Claims 20 Million Logins for Sale

OpenAI may have become the latest high-profile target of a significant data breach.A...

Lumma Stealer Attacking Windows Users In India With Fake Captcha Pages

Cybersecurity experts are raising alarms over a new wave of attacks targeting Windows users...

Beware of Lazarus LinkedIn Recruiting Scam Targeting Org’s to Deliver Malware

A new wave of cyberattacks orchestrated by the North Korea-linked Lazarus Group has been...

F5 BIG-IP SNMP Flaw Allows Attackers to Launch DoS Attacks

A recently disclosed vulnerability in F5's BIG-IP systems has raised alarm within the cybersecurity...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Salt Typhoon Hacked Nine U.S. Telecoms, Tactics and Techniques Revealed

Salt Typhoon, a state-sponsored Advanced Persistent Threat (APT) group linked to the People's Republic...

APT32 Hacker Group Attacking Cybersecurity Professionals Poisoning GitHub

The malicious Southeast Asian APT group known as OceanLotus (APT32) has been implicated in...

Casio Hacked – Servers Compromised by a Ransomware Attack

Casio Computer Co., Ltd. has confirmed a significant cybersecurity breach after its servers were...