Washington — The United States has identified and taken down a botnet campaign by China-directed hackers to further infiltrate American infrastructure as well as a variety of internet-connected devices. 

FBI Director Christopher Wray announced the disruption of what he called Flax Typhoon during a cyber summit Wednesday in Washington, describing it as part of a much larger campaign by Beijing. 

“Flax Typhoon hijacked Internet-of-Things devices like cameras, video recorders and storage devices — things typically found across both big and small organizations,” Wray said. “And about half of those hijacked devices were located here in the U.S.” 

Wray said the hackers, working under the guise of an information security company called the Integrity Technology Group, collected information from corporations, media organizations, universities and government agencies. 

“They used internet-connected devices — this time, hundreds of thousands of them — to create a botnet that helped them compromise systems and exfiltrate confidential data,” he said. 

But Flax Typhoon’s operations were disrupted last week when the FBI, working with allies and under court orders, took control of the botnet and pursued the hackers when they tried to switch to a backup system. 

“We think the bad guys finally realized that it was the FBI and our partners that they were up against,” Wray said. “And with that realization, they essentially burned down their new infrastructure and abandoned their botnet.” 

Wray said Flax Typhoon appeared to build on the exploits and tactics of another China-linked hacking group, known as Volt Typhoon, which was identified by Microsoft in May of last year. 

Volt Typhoon used office network equipment, including routers, firewalls and VPN hardware, to infiltrate and disrupt communications infrastructure in Guam, home to key U.S. military facilities. 

VOA has reached out to the Chinese Embassy in Washington for comment. 

The FBI and the U.S. Cybersecurity and Infrastructure Security Agency have previously warned that Chinese-government directed hackers, like Volt Typhoon, have been positioning themselves to launch destructive cyberattacks that could jeopardize the physical safety of Americans. 

Following Wednesday’s announcement by the FBI, the U.S. National Security Agency (NSA) issued an advisory encouraging anyone with a device that was compromised by Flax Typhoon to apply needed patches. 

It said that as of this past June, the Flax Typhoon botnet was making use of more than 260,000 devices in North America, Europe, Africa and Southeast East. 

The NSA said almost half of the compromised devices were in the U.S. Another 18 countries, including Vietnam, Bangladesh, Albania, China, South Africa and India, were also impacted.

 
…

Ratcliffe on Soar, United Kingdom — Ratcliffe-on-Soar Power Station has dominated the landscape of the English East Midlands for nearly 60 years, looming over the small town of the same name and a landmark on the M1 motorway bisecting Derby and Nottingham.  

At the mainline railway station serving the nearby East Midlands Airport, its giant cooling towers rise up seemingly within touching distance of the track and platform.  

But at the end of this month, the site in central England will close its doors, signaling the end to polluting coal-powered electricity in the UK, in a landmark first for any G7 nation.   

“It’ll seem very strange because it has always been there,” said David Reynolds, a 74-year-old retiree who saw the site being built as a child before it began operations in 1967.  

“When I was younger you could go down certain parts and you saw nothing but coal pits,” he told AFP.   

Energy transition 

Coal has played a vital part in British economic history, powering the Industrial Revolution of the 18th and 19th centuries that made the country a global superpower, and creating London’s infamous choking smog.  

Even into the 1980s, it still represented 70% of the country’s electricity mix before its share declined in the 1990s.   

In the last decade the fall has been even sharper, slumping to 38% in 2013, 5.0% in 2018 then just 1.0% last year. 

In 2015, the then Conservative government said that it intended to shut all coal-fired power stations by 2025 to reduce carbon emissions.  

Jess Ralston, head of energy at the Energy and Climate Intelligence Unit think-tank, said the UK’s 2030 clean-energy target was “very ambitious.”  

But she added: “It sends a very strong message that the UK is taking climate change as a matter of great importance and also that this is only the first step.”  

By last year, natural gas represented a third of the UK’s electricity production, while a quarter came from wind power and 13 percent from nuclear power, according to electricity operator National Grid ESO.  

“The UK managed to phase coal out so quickly largely through a combination of economics and then regulations,” Ralston said.   

“So larger power plants like coal plants had regulations put on them because of all the sulphur dioxide, nitrous oxides, all the emissions coming from the plant and that meant that it was no longer economically attractive to invest in those sorts of plants.”  

The new Labour government launched its flagship green energy plan after its election win in July, with the creation of a publicly owned body to invest in offshore wind, tidal power and nuclear power.  

The aim is to make Britain a superpower once more, this time in “clean energy.”  

As such, Ratcliffe-on-Soar’s closure on September 30 is a symbolic step in the UK’s ambition to decarbonize electricity by 2030, and become carbon neutral by 2050.   

It will make the country the first in the G7 of rich nations to do away entirely with coal power electricity.  

Italy plans to do so by next year, France in 2027, Canada in 2030 and Germany in 2038. Japan and the United States have no set dates.   

• ‘End of an era’ – 

In recent years, Ratcliffe-on-Soar Power Station, which had the potential to power two million homes, has been used only when big spikes in electricity use were expected, such as during a cold snap in 2022 or the 2023 heatwave.  

Its last delivery of 1,650 tons of coal at the start of this summer barely supplied 500,000 homes for eight hours.    

“It’s like the end of a era,” said Becky, 25, serving £4 pints behind the bar of the Red Lion pub in nearby Kegworth.  

Her father works at the power station and will be out of a job. September 30 is likely to stir up strong emotions for him and the other 350 remaining employees.   

“It’s their life,” she said.  

Nothing remains of the world’s first coal-fired power station, which was built by Thomas Edison in central London in 1882, three years after his invention of the electric light bulb.  

The same fate is slated for Ratcliffe-on-Soar: the site’s German owner, Uniper, said it will be completely dismantled “by the end of the decade.”  

In its place will be a new development — a “carbon-free technology and energy hub”, the company said.
…

brussels — Europe’s second-top court largely confirmed on Wednesday an EU antitrust fine imposed on U.S. chipmaker Qualcomm, revising it down slightly to $265.5 million from an initial $2.7 million.

The European Commission imposed the fine in 2019, saying that Qualcomm sold its chipsets below cost between 2009 and 2011, in a practice known as predatory pricing, to thwart British phone software maker Icera, which is now part of Nvidia Corp.

Qualcomm had argued that the 3G baseband chipsets singled out in the case accounted for just 0.7% of the Universal Mobile Telecommunications System (UMTS) market and so it was not possible for it to exclude rivals from the chipset market.

The Court made “a detailed examination of all the pleas put forward by Qualcomm, rejecting them all in their entirety, with the exception of a plea concerning the calculation of the amount of the fine, which it finds to be well founded in part,” the Luxembourg-based General Court said.

Qualcomm can appeal on points of law to the EU Court of Justice, Europe’s highest.

The chipmaker did not immediately reply to an emailed Reuters request for comment.

The company convinced the same court two years ago to throw out a $1.1 billion antitrust fine handed down in 2018 for paying billions of dollars to Apple from 2011 to 2016 to use only its chips in all its iPhones and iPads in order to block out rivals such as Intel Corp.

The EU watchdog subsequently declined to appeal the judgment.
…

Brussels — Teresa Ribera will have to square up to Big Tech, banks and airlines if confirmed as Europe’s new antitrust chief, while juggling calls for looser rules to help create EU champions.

Nominated Tuesday by European Commission President Ursula von der Leyen for the high-profile antitrust post, Ribera has been Spain’s minister for ecological transition since 2018.

The 55-year-old Spanish socialist, one of Europe’s most ambitious policymakers on climate change, will have to secure European Parliament approval before taking up her post.

As competition commissioner, she will be able to approve or veto multi-billion euro mergers or slap hefty fines on companies seeking to bolster their market power by throttling smaller rivals or illegally teaming up to fix prices.

One of her biggest challenges will be to ensure that Amazon, Apple, Alphabet’s Google, Microsoft and Meta comply with landmark rules aimed at reining in their power and giving consumers more choice.

Apple, Google and Meta are firmly in outgoing EU antitrust chief Margrethe Vestager’s crosshairs for falling short of complying with the Digital Markets Act.

Another challenge will be how to deal with the increasing popularity of artificial intelligence amid concerns about Big Tech leveraging its existing dominance.

Ribera may ramp up a crackdown on non-EU state subsidies begun by Vestager aimed at preventing foreign companies from acquiring EU businesses or taking part in EU public tenders with unfair state support.

Recent rulings from Europe’s highest court, which backed the Commission’s $14.5 billion tax order to Apple, and its $2.7 billion antitrust fine against Google, could embolden Ribera to take a tough line against antitrust violations.

That would mean she would be in no hurry to ease up on antitrust rules, despite Mario Draghi’s call to boost EU industrial champions so that they are able to compete with U.S. and Chinese competitors.

Ribera was also named on Tuesday as executive vice president of a clean, just and competitive energy transition, tasked with ensuring that Europe achieves its green goals.

Her credentials include negotiating deals last year among EU countries on emissions limits for trucks and a contentious upgrade of EU power market rules.

 
…

PARIS — When French prosecutors took aim at Telegram boss Pavel Durov, they had a trump card to wield – a tough new law with no international equivalent that criminalizes tech titans whose platforms allow illegal products or activities.

The so-called LOPMI law, enacted in January 2023, has placed France at the forefront of a group of nations taking a sterner stance on crime-ridden websites. But the law is so recent that prosecutors have yet to secure a conviction.

With the law still untested in court, France’s pioneering push to prosecute figures like Durov could backfire if its judges balk at penalizing tech bosses for alleged criminality on their platforms.

A French judge placed Durov under formal investigation last month, charging him with various crimes, including the 2023 offence: “Complicity in the administration of an online platform to allow an illicit transaction, in an organized gang,” which carries a maximum 10-year sentence and a $556,300 fine.

Being under formal investigation does not imply guilt or necessarily lead to trial, but indicates judges think there’s enough evidence to proceed with the probe. Investigations can last years before being sent to trial or dropped.

Durov, out on bail, denies Telegram was an “anarchic paradise.” Telegram has said it “abides by EU laws,” and that it’s “absurd to claim that a platform or its owner are responsible for abuse of that platform.”

In a radio interview last week, Paris Prosecutor Laure Beccuau hailed the 2023 law as a powerful tool for battling organized crime groups who are increasingly operating online.

The law appears to be unique. Eight lawyers and academics told Reuters they were unaware of any other country with a similar statute.

“There is no crime in U.S. law directly analogous to that and none that I’m aware of in the Western world,” said Adam Hickey, a former U.S. deputy assistant attorney general who established the Justice Department’s (DOJ) national security cyber program.

Hickey, now at U.S. law firm Mayer Brown, said U.S. prosecutors could charge a tech boss as a “co-conspirator or an aider and abettor of the crimes committed by users” but only if there was evidence the “operator intends that its users engage in, and himself facilitates, criminal activities.”

He cited the 2015 conviction of Ross Ulbricht, whose Silk Road website hosted drug sales. U.S. prosecutors argued Ulbricht “deliberately operated Silk Road as an online criminal marketplace … outside the reach of law enforcement,” according to the DOJ. Ulbricht got a life sentence.

Timothy Howard, a former U.S. federal prosecutor who put Ulbricht behind bars, was “skeptical” Durov could be convicted in the United States without proof he knew about the crimes on Telegram, and actively facilitated them – especially given Telegram’s vast, mainly law-abiding user base.

“Coming from my experience of the U.S. legal system,” he said, the French law appears “an aggressive theory.”

Michel Séjean, a French professor of cyber law, said the toughened legislation in France came after authorities grew exasperated with companies like Telegram.

“It’s not a nuclear weapon,” he said. “It’s a weapon to prevent you from being impotent when faced with platforms that don’t cooperate.”

Tougher laws

The 2023 law traces its origins to a 2020 French interior ministry white paper, which called for major investment in technology to tackle growing cyber threats.

It was followed by a similar law in November 2023, which included a measure for the real-time geolocation of people suspected of serious crimes by remotely activating their devices. A proposal to turn on their devices’ cameras and mouthpieces so that investigators could watch or listen in was shot down by France’s Constitutional Council.

These new laws have given France some of the world’s toughest tools for tackling cybercrime, with the proof being the arrest of Durov on French soil, said Sadry Porlon, a French lawyer specialized in communication technology law.

Tom Holt, a cybercrime professor at Michigan State University, said LOPMI “is a potentially powerful and effective tool if used properly,” particularly in probes into child sexual abuse images, credit card trafficking and distributed denial of service attacks, which target businesses or governments.

Armed with fresh legislative powers, the ambitious J3 cybercrime unit at the Paris prosecutor’s office, which is overseeing the Durov probe, is now involved in some of France’s most high-profile cases.

In June, the J3 unit shut down Coco, an anonymized chat forum cited in over 23,000 legal proceedings since 2021 for crimes including prostitution, rape and homicide.

Coco played a central role in a current trial that has shocked France.

Dominique Pelicot, 71, is accused of recruiting dozens of men on Coco to rape his wife, whom he had knocked out with drugs. Pelicot, who is expected to testify this week, has admitted his guilt, while 50 other men are on trial for rape.

Coco’s owner, Isaac Steidel, is suspected of a similar crime as Durov: “Provision of an online platform to allow an illicit transaction by an organized gang.”

Steidel’s lawyer, Julien Zanatta, declined to comment.
…

WASHINGTON — “I love you, China. My dear mother,” former U.S. President Donald Trump, standing in front of a mic at a lectern, appears to sing in perfect Mandarin.

“I cry for you, and I also feel proud for you,” Vice President Kamala Harris, Trump’s Democratic opponent in this year’s election, appears to respond, also in perfect Mandarin. Trump lets out a smile as he listens to the lyric.

The video has received thousands of likes and tens of thousands of reposts on Douyin, China’s variation of TikTok.

“These two are almost as Chinese as it gets,” one comment says.

Neither Trump nor Harris knows Mandarin. And the duet shown in the video has never happened. But recently, deepfake videos, frequently featuring top U.S. leaders, including President Joe Biden, singing Chinese pop songs, have gone viral on the Chinese internet.

Some of the videos have found their way to social media platforms not available in China, such as Instagram, TikTok and X.

U.S. intelligence officials and experts have long warned about how China and other foreign adversaries have been implementing generative AI in their disinformation effort to disrupt and influence the 2024 presidential election.

“There has been an increased use of Chinese AI-generated content in recent months, attempting to influence and sow division in the U.S. and elsewhere,” a Microsoft report on China’s disinformation threat said in April.

Few of the people who saw the videos of the American leaders singing in Chinese, however, were convinced that they were real, based on what users wrote in the comments. The videos themselves do not contain misinformation, either.

Instead, these videos and their popularity reflect, at least in part, a sense of cultural confidence in Chinese netizens in the age of perpetually intensifying U.S.-China competitions, observers told VOA Mandarin.

By making the likes of Biden and Trump sing whatever Chinese songs the creators of the videos want them to sing, they can “culturally domesticate powerful Americans,” said Alexa Pan, a researcher on China’s AI industry for ChinaTalk, an influential newsletter about China and technology.

“Making fun of U.S. leaders might be especially politically acceptable to and popular with Chinese viewers,” she said.

Political opponents sing about friendship

Videos of American leaders singing in Chinese started to spread on Chinese social media in May. In many of the videos featuring Biden and Trump, creators made the two politically opposed men sing songs about friendship.

After Biden announced his withdrawal from the presidential race in July, one viral video had him sing to Trump, “Actually I don’t want to leave. Actually, I want to stay. I want to stay with you through every spring, summer, autumn and winter,” to which Trump appeared to sing, “You have to believe me. It won’t take long before we can spend our whole life together.”

“Crying eyes,” one Chinese netizen commented sarcastically. “They must have gotten along really well.”

Another such video posted on Instagram received mostly positive reactions. Some users said it was a stark contrast to the bitterness that has permeated U.S. politics.

“Made me laugh,” an Instagram user wrote. “Wouldn’t that be so refreshing to actually have them sing like that together?”

Easy to make

After reviewing some of the videos, Pan, of ChinaTalk, told VOA Mandarin that she believes they were quite easy to make.

Obvious flaws in the videos, including body parts occasionally blending into the background, suggest they were created with simple AI technology, Pan said.

“One could generate these videos on the many AI text-to-video generation platforms available in China,” she wrote in an e-mail.

On the Chinese internet, there are countless tutorials on how to make AI-generated videos using popular lip-syncing AI models, such as MuseTalk, released by Chinese tech giant Tencent, and SadTalker, developed by Xi’an Jiaotong University, a research-focused university in northwestern China.

One Douyin account reviewed by VOA Mandarin has pumped out over 200 videos of American leaders singing in Chinese since May. One of the account’s videos was even reposted by the Iranian embassy.

Chinese leaders off-limits

The release of ChatGPT by OpenAI in 2022 has triggered a global AI frenzy, with China being one of the leading countries developing the technology. The United Nations said in July that China had requested the most patents on generative AI, with the U.S. being a distant second.

On the Chinese internet, the obsession has been particularly strong with deepfakes, which can be used to manipulate videos, images and audio of people to make them appear to say or sing things that they have not actually uttered.

Some deepfake videos are made mostly for fun, such is the case with Biden and Trump singing Chinese songs. But there have also been abuses of the technology. Earlier this year, web users in China stole a Ukrainian girl’s image and turned her into a “Russian beauty” to sell goods online.

 China has released strict regulations on deepfakes. A 2022 law states that the technology cannot be used to “endanger the national security and interests, harm the image of the nation, harm the societal public interest, disturb economic or social order, or harm the lawful rights and interests of others.”

Yang Han, an Australian commentator who used to work for China’s Foreign Ministry, told VOA Mandarin that the prominence of U.S leaders and the absence of Chinese leaders in these viral AI videos reflects a lack of political free speech in China.

He said that it reminds him of a joke that former U.S. President Ronald Reagan used to tell during the Cold War.

“An American and a Russian compare with each other whose country has more freedom,” Yang said, relaying the joke. “The American says he can stand in front of the White House and call Reagan stupid. The Russian dismisses it and says he can also stand in front of the Kremlin and call Reagan stupid.”
…

…