East Asia top source of cyber espionage, but with major caveats
Posted: April 25, 2014 Filed under: Uncategorized | Tags: APT, china, cyber attacks, cyber espionage, data breach investigations report, Eastern asia, hacking, north america cyber attacks, state sponsored cyber espionage, targeted attacks, Verizon business Leave a comment
Verizon’s annual Data Breach Investigations Report is out and several headlines have pointed to it highlighting China once again as the biggest source of global cyber espionage threats, however we need to be careful drawing such conclusions.
The report revealed that when it comes to cyber espionage, the majority (87%) is state affiliated rather than committed by organised crime (11%) and is targeted at victim organisations outside of the country of origin.
When it comes to “victim countries”, the US (54%) accounts for by far the majority, followed by South Korea (6%) and Japan (3%), although this is more of a reflection of the intelligence sources that inform the report than anything else.
More interestingly, it pegged “external actors” operating from Eastern Asia – mainly China and North Korea – as the most prolific worldwide, accounting for 49%.
Eastern Europe was next (21%), followed by Western Asia (4%), while North America and Europe were way down with just 1% each.
So what does this tell us? Well, those looking to prove that China is once again the arch bogeyman when it comes to global state-sponsored attacks should think twice, according to Verizon.
Report co-author and senior analyst, Kevin Thompson, told me that the results reflect the fact that large numbers of North American companies participate in the study and relatively few hail from East Asia – with none from China and Japan.
“We have been trying to recruit a partner organisation from China, Japan, or South Korea to increase our visibility into that part of the world,” he added. “Since many of our partners that investigate cyber espionage are based in North America they tend to only see attacks that are aimed at North American companies.”
Also, out of 511 total cyber espionage incidents recorded, more than half (281) were removed because no country could be attributed as the source of an attack.
“East Asia is the most commonly seen espionage actor when our partners are able to identify the country at all, which is not even half of the time,” Thompson explained.
“There tends to be more research around East Asian espionage than other countries, especially among North American partner organisations. Since there is more research in that area, it is easier for a partner to identify espionage from those regions while espionage from North America or Europe might be labelled ‘Unknown’ and would not be included in figure 59 of the report.”
If the NSA revelations have taught us anything it’s that the 1% figure for North America-based attacks is likely to be way smaller than in reality.
Verizon also claimed in the report that “the percentage of incidents attributed to East Asia is much less predominant in this year’s dataset”.
The real growth in activity is actually coming from Eastern European attackers, it said, adding the following:
At a high level, there doesn’t seem to be much difference in the industries targeted by East Asian and Eastern European groups. Chinese actors appeared to target a greater breadth of industries, but that’s because there were more campaigns attributed to them.
Malicious email attachment (78%) and web drive-by (20%) are still the most popular method of gaining access to a victim’s environment.
As for advice on how to lower the risk of a compromise, Verizon reiterated the basics.
These include: patch all systems and software so they’re fully up-to-date; use and keep an updated anti-malware solution; maintain user training and awareness programs; segment your network; log system, network, and application activity; monitor outbound traffic for data exfiltration; and use 2FA to stop lateral movement inside the network.
Indonesia’s 20 per cent smartphone tax likely to backfire
Posted: April 11, 2014 Filed under: Uncategorized | Tags: apple, blackaberry, canalys, foxconn, foxconn indonesia, import tax, indonesia, iphone 4, jakarta post, mobile phones, smartphones, the register Leave a comment
This week news emerged that the Indonesian government is planning to levy a 20 per cent luxury goods sales tax on all smartphones made outside the country. It’s an old fashioned piece of protectionism which could hit mobile phone makers in the region pretty hard and is unlikely to have the desired outcome.
As I mentioned in my story for The Register, Indonesia is a growing smartphone market with massive potential – as the world’s fourth most populous nation.
Firms that might be particularly dismayed by the tax include BlackBerry, which counts Indonesia as one of its few remaining strongholds, and Apple, which only recently restarted iPhone 4 production to target budget conscious locals.
If the rumours are true it can be seen less as an attempt to spur local handset makers, of which there are few, and more as a means to persuade more global manufacturers to locate facilities in the country.
Foxconn has already stolen a march on its rivals here by announcing a $1bn investment in facilities there.
Canalys analyst Jessica Kwee told me that, seeing as most domestic smartphone makers are focused on cheap, low-end handsets it’s unlikely that high-end users will be persuaded by the tax to buy local.
“What I think is more likely to happen is that the extremely wealthy would continue to buy their premium phones as is,” she said.
“Then other users will resort to the grey market to source their high-end phones – either via grey importers, by buying when they travel to nearby countries like Singapore or Malaysia, or by requesting from their friends etc. The latter would certainly not benefit the government.”
It’ll be interesting to see whether the government follows through with its plans. After all, at one stage it was mooting the tax only on handsets over Rp 5 million (£260), which I still reckon is the most likely outcome.
“Don’t get bitten by Asia’s offshore tigers,” says Gartner
Posted: April 3, 2014 Filed under: Uncategorized | Tags: APAC outsourcing, asia offshoring, china, gartner, india, it manufacturing, IT offshoring, IT services, nearshoring, outsourcing Leave a comment
IT offshoring; not the most exciting topic in the world but a vital contributor to the global IT economy. Last week Gartner released a new report detailing the challenges and opportunities facing Asian locations and warned that while emerging stars such as Indonesia and Vietnam offer great cost savings, there are risks.
Primary among these, as I noted for The Reg, is that none are doing well when it comes to their Data/IP Security and Privacy rating.
Indonesia, Thailand, Sri Lanka, Bangladesh and Vietnam all ranked “poor”, while more mature markets China, Philippines, India and Malaysia only did one better at “fair”.
Report author Jim Longwood also told me that despite ostensibly low costs, some emerging destinations may incur hidden “soft costs”.
“In some countries, for example, you might have to use a local joint venture; or for manufacturing pay additional fees to ensure a higher level of continuity of power supply than local businesses and homes might receive to avoid ‘brown outs’,” he said.
“Another soft cost is building a local brand, to enable the captive to attract a better quality of resources, e.g. when competing against the well-known global brands like of IBM, HP, Microsoft, SAP & Oracle for local talent. Part of this may well be investing building campus type facilities as the Indian providers have done.”
So, which will emerge as the favourite place to offshore IT services in the future?
Well, there are a number of locations vying for the business of MNCs, the analyst told me. Vietnam Bangladesh and Indonesia are leading the pack of emerging Asian countries thanks to strong government support for the first two and “more adhoc local entrepreneurial means” in the latter.
As for China, well it is certainly creeping up fast on India, and was rated by Gartner as the sub-continent’s number one challenger in terms of scale.
However, India has won the “current battle” in terms of horizontal IT services for apps and business processes and will not be overtaken by the Middle Kingdom anytime soon.
“However, versus India, China has certainly won the ‘battle’ to be a leading global site for manufacturing technology whether for TVs, telecommunications or IT hardware componentry,” he added.
Alibaba’s IPO: time to splash some cash on the cloud
Posted: March 18, 2014 Filed under: Uncategorized | Tags: alibaba, china, e-commerce, gartner, hong kong stock exchange, IPO, JD.com, laiwang, public listing, taobao, tencent, US stock market, wechat Leave a comment
Alibaba finally announced plans to list on the stock market on Sunday after months of speculation and protracted discussions with the Hong Kong stock exchange.
A lot of the column inches devoted to this piece of news have focused on the firm’s decision to chose the US, rather than Hong Kong to IPO, and while it will be a blow to the SAR, there really wasn’t much it could do.
The bottom line is that Alibaba wanted to continue electing the majority of its board even after going public and the HKSE has a very strict one-shareholder-one-vote rule, which it could not break. End of story.
Of course, its decision to go Stateside doesn’t hurt Alibaba’s attempts to globalise its brands and attract more big name investors from the US. It will certainly be pretty happy with the way things turned out.
However, it would be wrong to interpret the move as an attempt to internationalise, even given the following statement from the firm:
This [IPO] will make us a more global company and enhance the company’s transparency, as well as allow the company to continue to pursue our long-term vision and ideals.
As numerous industry analysts have told me this week, the IPO is all about raising funds (as much as $15bn if rumours are to be believed) to grow its business in China.
Yes, it’s still China that dominates Alibaba’s thinking and it’s easy to see why. In terms of e-commerce the likes of Amazon and eBay will make it very difficult to compete outside the Middle Kingdom, while inside there is still a huge amount of growth going on.
China is poised to become the world’s biggest market for online commerce by 2015-16. “Growth will double in the next five years so the market is definitely big enough for two or three major providers,” Gartner analyst Jane Zhang told me.
This is just as well, as arch rival Tencent is breathing down its neck with its recent JD.com deal and could present a significant challenge to Ali in the future, Zhang added.
Not that Alibaba has taken its eye off the ball with mobile, investing in Sina, AutoNavi and extending Taobao to the mobile sphere, but its Laiwang messaging service has been a bit of a stinker and really pales in comparison to WeChat’s success.
A lot of the IPO money, Zhang told me, will go on growing its cloud and hybrid infrastructure, as Alibaba takes a leaf out of Amazon’s book and goes into business of providing IT infrastructure as a service in earnest.
Frost & Sullivan analyst Marc Einstein echoed these thoughts.
“Alibaba has some global ambitions but obviously competition is too severe in the US and emerging markets would be more likely targets,” he told me. “Therefore I think that they will continue to diversify into new businesses and mirror companies like Google and Amazon rather than trying to compete head on.”
China’s mobile cyber crime underground…and me on the Beeb
Posted: March 7, 2014 Filed under: Uncategorized | Tags: android, apple, bbc, bbc newsday, beijing, censorship, china, china malware, communist party, iOS, mobile cybercriminal market in china, mobile malware, trend micro 1 Comment
I was on BBC Newsday, a World Service breakfast programme, on Wednesday talking about the Chinese cyber mobile underground story I wrote up for The Reg this week.
It’s based on a Trend Micro report – The Mobile Cybercriminal Underground Market in China – published this week by its Forward Looking Threat Research Team, which reveals once again the sophistication and commercialisation of the underground networks via which cyber criminals trade goods and service.
Although the report itself doesn’t throw up a huge amount of new data it’s interesting to see evidence that such networks exist in China, selling common attack kits like premium service abusers, SMS Forwarder Trojans and spam.
Typically, being broadcast journalism we were kept strictly to 5 minutes of short, sharp soundbursts by the BBC which allowed for little meaningful discussion of the topic besides “what’s the Dark Web”? “How do I get on it?” and Who’s behind these attacks?”. I had a better chat with the researcher the night before.
That said, it’s an important topic to air publically.
Although we didn’t cover this in as much detail as I’d have liked, the real message to listeners of the program – which apparently has among the highest audience numbers on the planet – is to be more vigilant when downloading apps online and make sure they install basic AV on smartphones.
In China, where unregulated third party Android stores are the norm and mobile AV is rare, the cyber criminals have it made.
The only light I can see on the horizon in this part of the world is for the government to follow through with its planned regulation of the mobile app space. This would force industry to self-regulate and clamp down on malicious apps either pre-loaded onto phones or uploaded to web stores.
The only problem is that any new regulations are also likely to restrict content deemed “offensive” to Beijing – in other words censorship by the back door.
Apple’s shipment struggles as market share sinks in China
Posted: February 20, 2014 Filed under: Uncategorized | Tags: apple, apple china, china, china mobile, china smartphones, coolpad, cupertino, huawei, IDC, iphone, lenovo, market share, samsung, smartphone market, xiaomi Leave a comment
Last Friday I reported how China’s smartphone market had hit its first major slowdown in 27 months, as the growth engine of Asia slowly matures.
Well, I’ve been back to the analyst house where those stats came from to ask specifically who the biggest handset winners and losers are in China at the moment.
Unsurprisingly Samsung remains number one with a market share of 19 per cent, followed by local players Lenovo (13 per cent), Coolpad (11 per cent) and Huawei (10 per cent).
Apple rounded out the top five with a 7 per cent share – which various reports have shown was a one per cent improvement on the previous quarter and signs that things are picking up in China for the US giant.
Well, I’m not quite so sure. IDC senior research manager Melissa Chau told me that the biggest year-on-year movers were actually Lenovo (+57%), Coolpad (+36 per cent) and Huawei (+26 per cent). Samsung posted not unimpressive 20 per cent growth, but Apple’s year-on-year share actually dropped 2 per cent.
By comparison, its nearest rival, home-grown star Xiaomi, notched impressive 91 per cent growth to take sixth place with 6 per cent of the market.
So will Apple be worried? Well yes and no, according to Chau.
On the one hand the Cupertino giant has always been a high margin business, making way more money on handsets than Xiaomi and most of its Chinese rivals. To that extent it doesn’t need to shift smartphones in volumes quite so great.
However, the counter argument is that Apple needs to be seen as an attractive, popular platform, for the sake of its ecosystem.
“It is relevant to look at shipments because they affect Apple’s market power; it’s ability to attract developers,” Chau explained.
“Apple must walk a fine line making sure it doesn’t drop so far down that Android is the only ecosystem in China. It won’t be a risk it’s taking this or next year but it needs to watch [this trend]. That’s why it makes sense to launch a lower cost model there.”
You can’t argue with this logic. With Xiaomi’s low margin, high volume strategy potentially lifting it above Apple the last thing Cupertino wants is to be left floating outside of the leading pack, even if it is still hovering up revenue in one of its biggest markets.
Much has been written about the potential sales lift Apple’s recently announced deal with China Mobile – the world’s largest operator by subscriber numbers – will give it. However, as Chau told me, this might have been overplayed by some commentators – after all, we’re not talking about a new iPhone model here.
“Given the model has been out for some time I’m not sure the bump will be as significant as people are making out,” she argued. “The bump will come with the next iteration of the iPhone.”
All at Apple will be hoping that creates more buzz than its last major launch here. Or it could seriously be time to go back to the drawing board.
Intel Outside: the story behind Edison
Posted: February 14, 2014 Filed under: Uncategorized | Tags: behind intel edison, CES, china innovation, edison, intel, intel inside, intel labs china, R&D, randolph wang, raspberry pi, SD card, start up Leave a comment
I’ve just written up for The Reg a news story based on one of the most interesting interviews I’ve done since moving here to Hong Kong: Intel Labs China’s chief scientist, Randolph Wang.
There wasn’t enough time to put everything in that piece so here’s the unabridged version (unfortunately without pics as most of the gadgets mentioned here have never formally been shown to the public).
Wang joined the labs around three and a half years ago but spoke about the recent launch of Intel’s SD card-sized computer Edison with the zeal and excitement of a start-up founder.
This is probably pretty accurate, since he told me the labs function “more like a start-up” than part of a global chip behemoth.
He walked me through the process by which Edison was developed in those labs, by as few as 10-20 people on average, with the focus on “creating something new”, not reliant on preconceived notions on buzzwords; of “going to work, playing around and having fun”.
It started life apparently as an actual smart SD card which they plugged into an off-the-shelf camera and went about seeing what applications they could run on it.
The idea of a “slave device” soon became limiting, however, but they decided to keep the size, pluggable form factor and self-contained design and work with that.
“Over time we got rid of the constraints, so the SD card could be born to tell the device about it – to be a master not a slave,” he said. Eventually they got rid of the final constraint by building devices (30-40 odd of them) themselves to fully exploit the potential of Edison.
At this time the idea was not just to build simple, box-like prototypes but, in partnership with Tsinghua university’s industrial design department, to “build something beautiful”.
He told me about a pair of “crystal speakers” made of a transparent material where the light inside responds to the music being played, or of a smart bird feeder – as described in The Reg article – which recognises which bird lands on it, takes and pic and sends an alert out to the owner if it’s an interesting breed.
Another project he was keen to promote was the porcelain cup demoed by CEO Brian Krzanich on stage at CES last month.
“There’s an LED matrix embedded in the cup wall that allows the cup to display subtle info or alerts. At CES, our CEO Brian Krzanich demonstrated that the porcelain cup was working with the baby monitors (also powered by Edison) developed by Boston area start-up, Rest Devices,” he explained.
“If the baby’s respiration or temperature info is abnormal, the cup displays alert info. Alternatively, one can put applications in the cup so that it displays current temperature, or current Intel stock price, or as I was saying, with a pair of cups, the boyfriend cup lights up when the girlfriend puts coffee in her cup.”
What excited him so much was that the cup was made in a town called Jingdezhen, which has been making ultra-thin, high quality porcelain for over 1,700 years. Being so thin enables the light to shine through better, he explained.
Wang continued:
This is a remarkable story of marrying 2000 year old craftsmanship with the latest silicon technology. But it’s more than that. The town, though famous, is located in an impoverished area. One of the things talked about by the proponents of the “Maker revolution” is the idea of spawning new industries and generating new wealth at the most unlikely places, because the democratising effect of the “Maker phenomenon”. There’s a local “porcelain research institute” that we’re collaborating with, who see great potential in producing a new line of porcelain married with the latest cutting edge Intel technology to open new markets, thus breathing new life into an ancient local industry.
This kind of thing is not the end but the beginning for Edison, and with true SoCs, in which everything including Flash and DDR memory is on-die, set to land in a couple of years there’s the potential for the micro-computer to be made even smaller and cheaper in future.
The strength of the project will, however, depend on how developers take to it, Wang concluded.
“Each Edison-powered device is meant to house multiple applications that users can download into them and third-party application writers could write for. And these things can work together,” he said.
“We’ve tried to do something with the best intentions but I’m fairly certain that the best is yet to come and probably not from inside but outside.”
From Intel Inside to Intel Outside in a few short decades.
Then there were three: Lenovo prepares to join the US smartphone race
Posted: February 10, 2014 Filed under: Uncategorized | Tags: beijing, china, Congress, huawei, lenovo, lobby, M&A, motorola mobility, national security, state sponsored cyber espionage, yang yuanqing, zte Leave a comment
I’ve been doing a bit of work researching a piece on the latest Lenovo bombshell to hit the tech world – its $2.9bn bid for Motorola Mobility. Now, in my innocence, I reckoned there might be quite a few hurdles for Lenovo on this one, but the analysts I spoke to were pretty upbeat on the deal.
Remarkably, most were pretty confident this was a good buy and that it’ll help propel the firm to third in the global smartphone stakes in a matter of a couple of year.
It’s easy to see why on paper. Here’s what Canalys APAC MD Rachel Lashford told me were the main benefits for Lenovo:
· Immediate entry to the US market, Motorola’s major market, as well as key markets in Western Europe and Latin America.
· A unique relationship with Google.
· Credibility with operators and consumers worldwide.
· Existing US operator relationships and a handful of global ones.
· Additional experienced phone sales teams.
· Additional and highly rated phone engineers.
· Additional tablet and phone shipments, as it becomes the key manufacturer of Google’s Nexus line.
Hard to argue with that lot. It’s also hard to see how Lenovo could have done better than Motorola – there wasn’t much choice out there, after all (BlackBerry? HTC?). Except that doesn’t mean it’s going to be a success. Although it has high brand recognition in the US, Motorola is a fading star, with neither innovative designs or huge volume sales to its name.
I wonder then if it’s really going to give Lenovo that huge leg-up into the US smartphone space it desperately wants. I’ll be even more surprised if Lenovo merges the two brands, as various analysts told me will happen eventually, unless Plan A has succeeded perfectly.
The thing I imagined would cause the biggest potential roadblock is a US political backlash. Lawmakers can be a pretty obstinate bunch, especially when they feel their country is being invaded by ‘foreign hordes’.
It’s certainly right to say that Lenovo has a better relationship with the US government – where ThinkPads are still used – than most Chinese firms, and that consumer smartphones are hardly a national security matter, unlike telecoms infrastructure (sorry Huawei, ZTE). But I still think there’s the potential for a unwelcome bit of political interference here, especially if some more news comes to light on Chinese spying and state links to tech firms.
Given the stakes, it’s not surprising Lenovo has apparently hired some big name attorneys, some of whom have worked for the CIA and Homeland Security, to help it lobby the deal through.
Lashford even speculated that “announcing two deals in one month will ease its progress, not complicate it”. I suppose we’ll all have to wait and see on that one.
One thing’s for certain: Motorola employees will be a happy bunch. I wonder how may will be queuing up for Lenovo CEO Yang Yuanqing’s annual $3m employee bonus giveaway?


