Ministry of State Security discloses case of foreign hacker organizations attempting to steal our internal sensitive data and information.

Source: Ministry of State Security official account

Work by national security authorities has found that criminals widely carry out illegal activities such as obtaining site access permissions and stealing sensitive files and materials by, for example, adding malicious modules to search results, thereby threatening national security.

The case shows that an employee of a certain company, while using a search engine to look up a commonly used operations and maintenance software category, inadvertently entered a fake page “carefully crafted” by an overseas hacker group. The employee downloaded and ran the software containing malicious code, resulting in sensitive data on the computer being stolen.

Upon investigation, the company undertook the construction, operation, and maintenance work for information systems and websites of multiple important units. The overseas hacker group illegally obtained information such as website login credentials and attempted to gain unauthorized access to the backend systems and websites of our important units, with the goal of stealing internal sensitive materials and data. Fortunately, national security authorities promptly discovered and removed the hidden risks.

National security authorities advise that by cultivating a few good habits, you can substantially reduce risk.

Confirm identity information: Search engine rankings are not the same as a security certification. When viewing search results, you should also pay attention to verifying the website address information. Legitimate websites typically start with “https”; the browser address bar displays a padlock security icon. The domain name is concise and properly formatted, and you will not encounter cluttered characters or incorrect spellings.

Beware of free traps: Software such as “cracked versions,” “green versions,” and “ad-free versions” is often a high-incidence area for malicious links. Try not to click them. If you need to download software, it’s best to manually enter the official website URL and download from the correct secure official website.

Maintain immune protection: Installing endpoint security protection software is a necessary measure to safeguard your computer and personal information. Keep your device’s system and antivirus software updated, enable real-time monitoring, and promptly update browser, operating system, and patch files for all kinds of software. When you encounter forced page redirects, frequent pop-ups, or abnormal requests for permissions, immediately close and exit, and do not make any clicks.

Massive information and precise analysis—available in the Sina Finance app

责任编辑：韦子蓉