Old devices and unused servers can be used to spy on us, China’s top security agency warns

The Ministry of State Security (MSS) said in a post on Chinese messaging app WeChat it had noticed the trend in recent years.

The MSS said that in another case, a camera surveillance platform was attacked, with analysis revealing that the platform’s server stored the usernames and passwords for many users’ cameras. The system has not been maintained or updated in a long time, leading to a high risk of data leaks, the article said.

The ministry said if a spy agency took control of the platform, it could manipulate its cameras and use them to steal secrets. Meanwhile, network ports could also be controlled by foreign authorities to log into servers and launch attacks.

The MSS warned that as China’s network equipment modernized, risks associated with unused equipment also increased and that units with access to top secrets should better manage this equipment and better train staff to conduct regular checks and reduce the risk of leaks impede.

In addition, unused devices in information systems should be checked, ports that are no longer in use closed and any security gaps closed, according to the MSS.