It aimed to Tibetan and Uighur Chinese and Mongolian activists from phones that cybercriminals steal contact lists, messages and calls history, location-based data and information on the phones themselves.
Attack was carried out at the end of March 2013 and organizationally was very similar to the previous ones, aimed at the Uyghur and Tibetan activists. The main difference was that this time the attackers did not use the vulnerability to DOC, XLS and PDF-documents for hacking computers running Windows and Mac OS, and are focusing on mobile devices.
