Chinese hackers break into Chrome, Microsoft Edge and Safari in competition

Abacus Dipublikasikan 07.11, 19/11/2019
Chinese hackers break into Chrome, Microsoft Edge and Safari in competition

Tianfu Cup brings together China's best hackers, who excelled in overseas hacking competitions like Pwn2Own

Hackers from China are some of the best in the world. But now that they've been discouraged by their government from participating in foreign hacking competitions, teams are instead converging on Tianfu Cup -- the country's most elite competitive cybersecurity event.

Over the weekend, teams from Qihoo 360 and others hacked into some of the world's most popular Wi-Fi routers, web browsers and other software.

The organizers of Tianfu Cup say the event is designed to be a Chinese version of Pwn2Own -- the big global hacking challenge that brings together security researchers from all over the world twice a year. Organizers include Baidu, Alibaba, Tencent, Qihoo 360 and other Chinese tech companies.

Just like Pwn2Own, the rules are simple. Researchers pick from targets preselected by the organizers. On contest day, participants use the exploits they've prepared to attack any vulnerabilities they discover. If they succeed in gaining control of their target, they win.

During this year's competition, researchers demonstrated three successful exploits on Microsoft Edge, two on Google Chrome and one on Apple's Safari. In the software category, they managed to compromise Microsoft Office 365 ProPlus and Adobe PDF Reader. They also took over routers made by D-Link and TP-Link.

A spokesperson for Tianfu Cup told ZDNet that all security flaws found will be shared with their respective vendors. Wenxiang Qian, a participant who hacked into Chrome, said he reported the bugs he found to Google.

The development followed revealing comments from Qihoo 360 CEO Zhou Hongyi, who criticized Chinese hackers from taking part in international contests. He described security flaws as "important strategic resources" and said they "should stay inside China."

Despite the government directive, Chinese security researchers have been credited with helping American companies uncover flaws in their systems.

Tesla has thanked teams from Qihoo 360 and Tencent for reporting vulnerabilities between 2014 and 2018. And in 2017, the FBI in Alaska thanked Qihoo 360 for helping solve a criminal case involving malware that hacked into IoT devices.

Copyright (c) 2019. South China Morning Post Publishers Ltd. All rights reserved.

Artikel Asli