Again, attacking Google from China, the target is a Gmail account of government officials and military personnel, etc. Also leakage of personal information

In mid-December 2009A highly sophisticated large-scale cyber attack from China conducted against GoogleWas aimed at human rights activists in China and surveys revealed that attacks are constantly being conducted against human rights activists' Gmail accounts in China, the US and Europe, but again It became clear that the attack was done.

The target is a Gmail account of government officials, political activists, military personnel, etc. The influence such as leakage of personal information is confirmed.

Details are as below.
Official Google Blog: Ensuring your information is safe online

According to Google's official blog, the Internet plays a very big role in promoting free expression and pushing up economic growth, but at the same time it seems to be a tool that can be used for bad things . E-mail account hijacking, theft of personal information, fraud, etc. are being made by Internet companies and others, but it is already a common problem on the Internet.

Many malicious users do not target the e-mail account itself, but rather send a spam mail to a specific individual to direct them to the website they hacked, and the guided user sends an e-mail It is said that you are using a method called "phishing" to enter the password to access the account.

And with Google's own cloud-based security system, recently from attacks that are considered to be Jinan in China, an attack that collects passwords of Gmail users using phishing is a senior US government official and Chinese political activist , South Korea and other Asian officials, military personnel, journalists, etc., and confirmed that personal information leaked out with hundreds of accounts.

The goal of these attacks seems to be to monitor the contents of users' mails, and some users changed their settings, such as changing the mail forwarding settings with stolen passwords. In addition, Google, which detected this movement, notified the victim after stopping monitoring, and also notified the government authorities.

In response to this situation, Google must set a password for Google that will not be used on other sites without fail, Google will never mail a password to the user, a password in a form appearing in the mail We are calling on not to let you enter.