Chinese-linked hacker group breached Indonesian spy agency’s networks

Indonesian State Intelligence Agency

A GROUP OF COMPUTER hackers with links to the Chinese state is likely behind a major breach of networks belonging to at least ten Indonesian government ministries and agencies, including the country’s primary intelligence service. The breach was first reported on September 10 by cybersecurity firm Insikt Group, whose researchers say they have been monitoring the hacks since April of this year.

Insikt Group said experts in its threat research division noticed that a number of PlugX malware command and control servers were regularly communicating with hosts inside the networks of the Indonesian government. After forensically examining the communication patterns, the researchers concluded that the initial contact between the command and control servers and the Indonesian government networks was made in March of this year, if not earlier. The technical details of the intrusion are still being determined, according to Insikt Group.

The firm said that the breach was perpetrated by Mustang Panda, a mysterious advanced persistent threat actor, which is also known as BRONZE PRESIDENT, HoneyMyte, and Red Lich. In the past, Mustang Panda has been particularly active in Southeast Asia, targeting servers in Mongolia, Malaysia and Vietnam. The targets of this latest breach included the Indonesian State Intelligence Agency, known as BIN. According to Insikt Group, BIN was “the most sensitive target compromised in the campaign”.

The company said it notified the Indonesian government twice about these intrusions, in June and July. Although no response was forthcoming from the Indonesian government, changes in its computer networks since that time may be taken as evidence that the authorities took steps to “identify and clean the infected systems”, according to Insikt Group’s report.

Author: Ian Allen | Date: 14 September 2021 | Permalink

Australia, Indonesia exchange intelligence personnel to combat ISIS

2016 Jakarta attacksAn ambitious new personnel exchange program between intelligence agencies in Australia and Indonesia aims to combat the unprecedented rise of militant Islamism in Southeast Asia, which is fueled by the Islamic State. The program, which is already underway, aims to strengthen intelligence cooperation between two traditionally adversarial regional powers. According to The Australian newspaper, the scheme owes its existence to the growing recognition that the security environment in the region is rapidly deteriorating due to the popularity of the Islamic State. The militant group appears to have replaced al-Qaeda in the minds of many radical Islamists in Indonesia, Malaysia, the Philippines and elsewhere, and is fueling the resurgence of smaller Islamist sects that have laid largely dormant for years.

Relations between militant Islamist sects in Indonesia —the world’s most populous Muslim nation— have traditionally been factional in nature. But some experts fear that the unprecedented growth of the Islamic State is galvanizing and uniting Islamist factions throughout Southeast Asia. Chief among them is the Jemaah Islamiyah, an al-Qaeda-linked terrorist group operating across the region, which was behind the 2002 Bali bombings that killed over 200 people, 88 of them Australians. In January of this year, Jemaah Islamiyah praised a series of attacks in the Indonesian capital Jakarta, which were perpetrated by militants connected to the Islamic State. The attacks killed four people, far fewer than their perpetrators had hoped to harm. But they lasted for several hours and shocked many due to the ease with which the heavily armed terrorists were able to evade security measures. Similar attacks were recently prevented in their planning stages by security agencies in Malaysia and the Philippines.

These developments prompted the rapprochement that is currently taking place between two traditionally rival intelligence agencies, the Australian Security Intelligence Organisation (ASIO) and Indonesia’s State Intelligence Agency, commonly referred to as BIN. The two agencies have reportedly begun posting officers to each other’s headquarters on multi-month assignments. The purpose of these exchanges is to gain a detailed understanding of each other’s counterterrorist planning and operations, and devise areas of actionable cooperation. The plan can be characterized as ambitious, given that relations between ASIO and BIN were severely disrupted in late 2013 and are still damaged, according to some observers. The break in relations was prompted by revelations, made by the American defector Edward Snowden, that Australian intelligence spied on senior Indonesian politicians and their family members, including the wife of the country’s president. Indonesia responded by withdrawing its ambassador from Canberra and terminating all military and intelligence cooperation with Australia. Nine months later, the two countries signed a joint agreement promising to curb their intelligence activities against each other. Some observers suggest that it will take years for Indonesian and Australian intelligence to fully reestablish intelligence cooperation. However, the rapidly deteriorating security situation in Southeast Asia could be significantly accelerating this process.

Author: Joseph Fitsanakis | Date: 13 July 2016 | Permalink

Indonesian court clears former spy official of human right activist’s murder

In 2004, Indonesia’s most renowned human rights activist, Munir Said Thalib, was poisoned during a flight to the Netherlands. He was traveling aboard a plane operated by Garuda, Indonesia’s state carrier, when he consumed arsenic that had been clandestinely dispensed into his in-flight meal. A few months ago, Pollycarpus Budihari Priyanto, an off-duty Garuda pilot who was sitting next to Mr. Munir during his fatal flight, was given a 20-year prison term for poisoning the activist. During the court case, however, it was revealed that the convicted assassin had engaged in frequent telephone communication with General Muchdi Purwoprandjono, then Deputy Director of Indonesia’s State Intelligence Agency, commonly known as BIN. Read more of this post

%d bloggers like this: