Washington should stop cyberattacks targeting mobile users

The report "Mobile Cyberattacks Conducted by US Intelligence Agencies" released by the China Cybersecurity Industry Alliance on Tuesday exposes how relentless the United States-sourced malicious cyber activities targeting China have become in recent years, especially the malicious cyber activities carried out through the global supply chain.

According to the report, the US has conducted intensive malicious cyberattacks and eavesdropping activities against global mobile smart terminals, supply chains, and operators.

The US government has taken advantage of its monopoly in telecommunications technology and in the upstream of the telecommunications industry and supply chains, and carried out large-scale and long-term malicious cyber activities, which have been pervasive, targeting mobile phones and even the entire mobile industry ecosystem globally. It is clear the US is the major country that carries out cyberattacks through the supply chain and mobile operators, though it always tries to stick that label on other countries.

Over the years, the US has blamed others for threatening the security of the supply chain, applied double standards, and tried every means to hype up the so-called security issues in the 5G supply chain. At the same time, with the cooperation of major US internet companies or equipment suppliers, it has installed "back doors" in telecommunications equipment and products to serve its cyberattacks.

Compared with traditional PCs, mobile smart terminals such as cellphones have more network security exposure and vulnerabilities to attack, and so they are targeted by US intelligence agencies for key attacks. Their attack scenarios target mobile terminals, mobile network communication equipment, telecom operators, and other related systems.

By exploiting vulnerabilities in SIM cards, mobile operating systems, and apps, as well as deploying customized Trojans or commercial spyware, the US' mobile cyberattacks have actually penetrated every corner of network products such as SIM cards, firmware and operating systems, data interfaces such as USB cables, Wi-Fi, Bluetooth, cellular networks and GPS, the data centers of major internet and IT vendors, and even the entire mobile industry ecosystem, as the report revealed.

By doing so, these intelligence agencies extensively steal personnel data, account credentials, device information, communication links, and geolocation data. These large-scale and long-term eavesdropping and theft activities on global mobile smart terminals have undoubtedly endangered the cybersecurity and national security of countries around the world.

As Foreign Ministry spokesperson Guo Jiakun said on Tuesday, "We believe this report will help the international community have a better understanding of what the US has done in this field", urging the US side to cease its malicious cyber activities targeting China and beyond.

China's practices in and attitudes on promoting cybersecurity through exchanges and collaboration with other countries pose a stark contrast with the US.

China has engaged in active cross-border collaboration in terms of the digital economy, cyberspace security, and reform and development of global cyberspace governance to promote inclusive development of the internet, and all these efforts contribute to building a community with a shared future in cyberspace. It has worked to provide affordable internet access and has actively promoted an internet economy based on mobile connections in the least developed countries to eliminate poverty caused by lack of network facilities.

China is ready to work with other countries, including the US, to foster an open, inclusive, and vibrant cyberspace that is fairer, more secure, and more stable.

- Li Yang, China Daily