{"id":86746,"date":"2023-01-24T12:26:00","date_gmt":"2023-01-24T12:26:00","guid":{"rendered":"https:\/\/cloudnewshub.com\/archives\/86746"},"modified":"2023-01-24T12:26:00","modified_gmt":"2023-01-24T12:26:00","slug":"chinese-iot-suppliers-expose-uk-businesses-to-espionage-and-data-theft","status":"publish","type":"post","link":"https:\/\/cloudnewshub.com\/?p=86746","title":{"rendered":"Chinese IoT suppliers expose UK businesses to espionage and data theft"},"content":{"rendered":"<div><img decoding=\"async\" src=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/01\/chinese-iot-suppliers-expose-uk-businesses-to-espionage-and-data-theft.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>Chinese technology companies are supplying components used in a wide range of industrial and domestic smart devices that could expose businesses and governments to electronic spying by the Chinese state.<\/p>\n<p>China\u2019s development of cellular internet of things (IoT) modules, which are widely used in smart devices in agriculture, manufacturing, transport and CCTV, poses a serious but largely unrecognised risk, according to a <a href=\"https:\/\/www.oodaloop.com\/globalrisk\/2023\/01\/23\/chinese-cellular-iot-technology-an-analysis-of-threats-and-mitigation-measures\/\">study<\/a> published today.<\/p>\n<p>The study by <a href=\"https:\/\/www.oodaloop.com\/author\/charlieparton\/\">Charlie Parton<\/a>, a leading expert on China with 37 years in the diplomatic service, warns that in the long term, reliance on Chinese made modules in the IoT, poses a greater risk than China\u2019s 5G technology, which was supplied by Huawei \u2013 until it was banned in December 2020.<\/p>\n<p>Parton argues that the threats are real. For example, in January, government officials discovered a Chinese cellular IoT module, used as a tracking device in a car used by senior ministers, that had been hidden in parts from Chinese suppliers, according to a report in the <a href=\"https:\/\/inews.co.uk\/news\/hidden-chinese-tracking-device-government-car-national-security-2070152\"><em>i<\/em> newspaper<\/a>.<\/p>\n<section class=\"section main-article-chapter\" data-menu-title=\"Growth of Chinese IoT suppliers\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>Growth of Chinese IoT suppliers<\/h3>\n<p>China\u2019s two dominant IoT module suppliers, Quectel and Fibocom Wireless, supply IoT modules to a range of Chinese technology companies. They include surveillance camera manufacturer HikVision; HiSilicon, which designs silicon chips; DJI, a drone manufacturer; and telecoms equipment supplier ZTE \u2013 each of which are subject to export controls in the US.<\/p>\n<p>Fibocom has expanded into Canada and the US, through acquisitions, and has won contracts to supply PC manufacturers such as Lenovo, Dell and HP, which use Fibocom modules in their computers.<\/p>\n<p>Qualtec is targeting the US and Latin America and is trying to break into the overseas automotive market.<\/p>\n<p>Like other Chinese companies, Quectel and Fibocom are bound by China\u2019s national security laws, which require them to comply with requests from the Chinese state.<\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"Electronic espionage\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>Electronic espionage<\/h3>\n<p>The report warns that the Chinese Communist Party (CCP) could use IoT modules to harvest data for intelligence purposes.<\/p>\n<p>This could include using IoT modules embedded in supply chains and logistics systems used by defence manufacturers to build up a picture of how many spare parts and weapons systems have been delivered and to where.<\/p>\n<p>Data from IoT modules could also be used to identify individuals who might be susceptible to recruitment by Chinese intelligence agencies.<\/p>\n<p>By combining data from a wide range of sources, it would be possible to identify key government workers and their potential vulnerabilities.<\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"\u2018Venture communism\u2019\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>\u2018Venture communism\u2019<\/h3>\n<p>China\u2019s industrial policy aims to ensure Chinese companies dominate new technologies and industries.<\/p>\n<p>What Parton calls \u201cventure communism\u201d encourages Chinese companies to buy out foreign firms, particularly startups which are not protected by the UK\u2019s <a href=\"https:\/\/www.computerweekly.com\/feature\/The-National-Security-and-Investment-Act-What-datacentre-operators-and-investors-need-to-know\">National Security Investment Act<\/a>, to grow, obtain technology and intellectual property, or to reduce competition.<\/p>\n<p>He argues that China could access data from IoT modules in logistics, manufacturing and transport systems to monitor industrial supply chains.<\/p>\n<p>That data would provide insights into productivity, the quantity of supplies used by companies and their efficiency.<\/p>\n<p>A malicious actor could use the information to \u201ctune\u201d their bids for infrastructure projects or bids for competitors, says Parton, or to gain other strategic advantages over their competitors.<\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"Privacy risks to individuals\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>Privacy risks to individuals<\/h3>\n<p>The Chinese Communist Party could also compromise the privacy of the public by gathering data from Chinese-made IoT modules used in, for example, wearable devices such as smartwatches, smart kitchen devices, door cameras, and electricity and gas meters.<\/p>\n<p>By collecting data generated as people interact with IoT devices, particularly electronic payments and travel information, it is possible to work out who has been meeting with whom and where.<\/p>\n<p>Combined with machine learning, it will be possible to predict where a person might be or how they might act at a certain time.<\/p>\n<p>\u201cSuch a capability is a threat not just to individual liberty and freedom of choice, but to security through the increased risk of effective blackmail campaigns,\u201d the report says.<\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"Smart cities\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>Smart cities<\/h3>\n<p>Technology from Chinese suppliers underpins the development of smart cities, which provide city authorities with better ways to manage their transport and infrastructure.<\/p>\n<p>However, it is built on the back of work commissioned by the Chinese Communist Party to police minority populations such as the Uighurs, who have been subjected to internment camps in China.<\/p>\n<p>The National Cyber Security Centre, a branch of GCHQ, <a href=\"https:\/\/www.ft.com\/content\/46d35d62-0307-41d8-96a8-de9b52bf0ec3\">warned councils<\/a> in 2019 that smart city technology suppliers may come under pressure to exfiltrate data from the intelligence services in their countries.<\/p>\n<p>Bournemouth County Council <a href=\"https:\/\/www.ft.com\/content\/46d35d62-0307-41d8-96a8-de9b52bf0ec3\">dropped plans<\/a> for a smart city project with Chinese supplier Alibaba following government intervention, while Milton Keynes cancelled a smart city project with Huawei, the <em>Financial Times<\/em> reported.<\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"Dependency risk\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>Dependency risk<\/h3>\n<p>According to the report, three Chinese companies have over half of the international market, including the large Chinese domestic market, for cellular IoT modules.<\/p>\n<p>Because China regards the internet of things as a strategic technology, these companies benefit from access to subsidies, preferential pricing, and a domestic market that excludes international competition.<\/p>\n<p>If Chinese companies continue to increase global market share and to edge out foreign competitors, other companies will become dependent on China for cellular IoT modules.<\/p>\n<p>\u201cGiven the immense importance of these modules to modern industry and life, this would make other countries highly vulnerable to a threat to withhold supplies,\u201d said the report published by the Washington-based consultancy <a href=\"https:\/\/www.oodaloop.com\/general-inquiry\/\">OODA<\/a>.<\/p>\n<\/section>\n<section class=\"section main-article-chapter\" data-menu-title=\"Countries need to take action\">\n<h3 class=\"section-title\"><i class=\"icon\" data-icon=\"1\"><\/i>Countries need to take action<\/h3>\n<p>Parton argues that western countries need to take action to preserve their IoT manufacturers in the face of Chinese competition, having already taken action over 5G and semiconductors.<\/p>\n<p>\u201cThe longer the delay in limiting Chinese cellular IoT modules, the more difficult and expensive it becomes to replace them. The window of opportunity is closing, but it is still open,\u201d he says.<\/p>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Chinese technology companies are supplying components used in a wide range of industrial and domestic smart devices that could expose businesses and governments to electronic spying by the Chinese state. China\u2019s development of cellular internet of things (IoT) modules, which are widely used in smart devices in agriculture, manufacturing, transport and CCTV, poses a serious [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":86747,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[533],"tags":[],"class_list":["post-86746","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it"],"_links":{"self":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts\/86746","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86746"}],"version-history":[{"count":0,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts\/86746\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/media\/86747"}],"wp:attachment":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86746"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86746"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86746"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}