Skip to main content

Citizen Lab Reveals Exiled Uyghur Leaders Hit by Covert Windows Spyware

Rabia Tayyab
Verified
1 minute read
Silhouette of a person in a trench coat and hat holding a phone with a “Security Breach” alert, set against the East Turkestan flag and urban red-blue digital background, symbolizing spyware targeting Uyghur leaders.
Image: Silhouette of a person in a trench coat and hat holding a phone with a “Security Breach” alert, set against the East Turkestan flag and urban red-blue digital background, symbolizing spyware targeting Uyghur leaders.

Researchers said Monday that unknown hackers used Windows spyware to target representatives of the exiled Uyghur minority last month. The World Uyghur Congress (WUC), an organization which advocates for the Muslim minority group that has long been subject to repression, secernment, surveillance, and hacking by China's government, was the target of an espionage campaign, according to Citizen Lab, an online liberties research group centered at the University of Toronto.

According to the post on X, some WUC members contacted journalists and researchers from Citizen Lab when Google informed them about the hacking campaign in mid-March.

After conducting an investigation, Citizen Lab discovered that a targeted phishing email was sent to WUC members, posing as a reliable source and carrying a Google Drive link to a password-protected packed file that contained a malicious installation of a text editor in the Uyghur language.

Zero-day attacks and mercenaries spywares were not used in the campaign, according to the researchers, who also pointed out that "the delivery of the malware showed a high level of social engineering, revealing the attackers’ deep understanding of the target community.

Disclaimer

This article is for informational purposes only and does not constitute financial, investment, tax, or legal advice. Market data, tax rules, and prices can change after the article date. TECHi and its authors may hold positions in securities or digital assets mentioned. Always conduct your own research and consult a licensed financial, tax, or legal professional before making decisions.

Share

Pick your channel

Spotted an error?Report a correction →

About the Author

Rabia Tayyab
Rabia TayyabReviewedScore 50
@rabia-tayyabTech Writer

Rabia Tayyab is a technical writer at TECHi who specializes in simplifying complex topics and delivering accessible content. She balances precision and creativity to meet the needs of both technical and general audiences.

Comments