News

Chinese Border Guards Place Malware on Travellers' Phones

Giulio Saggin
Giulio Saggin
Tuesday 28 November 2023

Chinese authorities are installing malware onto the phones of travellers crossing the border into the Xinjiang region.

Border guards have been seizing phones at the Irkeshtam border crossing with Kyrgyzstan. iPhones are connected to a machine that scans them, while a surveillance app (malware) is installed on Android phones.

The information gathered includes emails, texts, calendar entries and phone contacts, as well as any other 'problematic' files that match the 73,000+ items listed in the app's code. Among them are terms linked with Islamist extremism and various weapons operation manuals, but also subjects such as the writings of the Dalai Lama. Even music from a grindcore band is on the list.

Kyrgyzstan is a predominantly Muslim nation and an estimated 1.5 million Uighurs and other Muslims, many of whom are being held in 're-education' centres, live in The Xinjiang region, where facial recognition cameras, CCTV, and physical searches are a part of daily life.

"We already know that Xinjiang residents, particularly Turkic Muslims, are subjected to round-the-clock and multidimensional surveillance in the region," said Maya Wang, China senior researcher at Human Rights Watch. "(This) suggests that even foreigners are subjected to such mass and unlawful surveillance."

The campaign group Privacy International, said the findings were "highly alarming in a country where downloading the wrong app or news article could land you in a detention camp. This is yet another example of why the surveillance regime in Xinjiang is one of the most unlawful, pervasive and draconian in the world."

No one is sure of what happens to the information or how long it is kept. When travellers leave Xinjiang, the app is removed. In most cases. There is no evidence showing that anyone has been tracked after leaving the region, however authorities have the ability use the information they have to find someone.

This story is based on a collaboration by the New York Times, the Guardian, Motherboard, Süddeutsche Zeitung, and the German public broadcaster NDR.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203