Apple says Chinese Muslim minority Uighurs targeted in iPhone attacks
5 security flaws led to a 'sustained' effort to hack over at least 2 years
Apple Inc. on Friday confirmed that Uighurs, a minority mostly Muslim group considered a security threat by Beijing, had been the target of attacks due to a set of iPhone security flaws, but disputed its rival Alphabet Inc.'s description of the effort to track users of the smartphone in real time.
Google Project Zero researchers said last week that a collection of five security flaws led to a "sustained effort to hack the users of iPhones in certain communities over a period of at least two years."
The researchers did not say which communities had been targeted, but CNN, TechCrunch and other news organizations subsequently reported that the attacks had been aimed at monitoring Uighurs. Reuters recently reported that China hacked Asian telecommunications companies to spy on Uighur travellers.
United Nations experts and activists say at least one million ethnic Uighurs and other Muslims are held in the detention centres in Xinjiang. China describes them as training centres helping to stamp out extremism and give people new skills.
Apple on Friday said the attack "was narrowly focused" and affected "fewer than a dozen websites that focus on content related to the Uighur community" rather than the "en masse" hack of iPhone users described by Google researchers. Apple also said it fixed the issue in February, within 10 days of being notified by Google.
Apple said that evidence suggested the website attacks were operation of only two months, rather than the two years that Google researchers had suggested.
"Google's post, issued six months after iOS patches were released, creates the false impression of mass exploitation to monitor the private activities of entire populations in real time, stoking fear among all iPhone users that their devices had been compromised," Apple said in a newsroom post. "This was never the case."
Google did not immediately have a comment.
Google and Apple are rivals in the smartphone market, where their iOS and Android operating systems vie for users. But Google's Project Zero team of researchers is focused on finding serious security flaws from a wide range of software and hardware firms, not solely Apple. Last year the group played a key part in finding security flaws in chips made by Intel Corp.
U.S. plans to press Uighur plight at UN
Meanwhile, U.S. Secretary of State Mike Pompeo said on Friday that the United States would use the UN General Assembly this month to persuade countries to help "call out" China over treatment of the Uighurs.
"We want freedom for those folks," Pompeo said after a speech in his native Kansas. "We have lots of challenges with China, but this is about their fundamental unalienable rights for those particular individuals."
Pompeo, an evangelical Christian who has portrayed himself as a champion of religious rights, reiterated past comments, saying that the treatment of the Uighurs and other Muslim minorities in China "may well end up being one of the worst stains on the world this century."
In his speech, Pompeo charged that over the past two years in its western province of Xinjiang, China had "tried to brainwash coming on one million Uighur Muslims in internment camps ... to renounce their culture and their faith."
He dismissed Chinese claims that the camps were meant to "educate and to save" people influenced by religious extremism.