A CHINESE national arrested last week in Manila on suspicion of spying has accessed more than 5,000 mobile subscribers’ identities through the use of an international mobile subscriber identity (IMSI) catcher, the National Bureau of Investigation said yesterday.
NBI spokesperson Ferdinand Lavin spoke before the Senate Special Committee on Philippine Maritime and Admiralty Zones which is looking into alleged spying activities of China in the country.
The IMSI, according to the NBI, can gather data and information such as text messages, mobile numbers and calls from cellular phones within a range of 500 meters to three kilometers.
Lavin said the arrest of Tak Hoi Lau last April 29 in front of the Commission on Elections main office in Intramuros, Manila was a result of information the agency got from an informant who saw the loading of a device resembling an IMSI catcher into a vehicle.
He said NBI agents started to tail the vehicle on April 24 as it went around various places in Metro Manila, including the Supreme Court and the Department of Justice in Manila, Villamor Air Base in Pasay City, and the Bureau of Internal Revenue office, also in Intramuros, “three to four times” until Tak was arrested in front of the Comelec main office.
He said that around the time Tak was arrested at about 1:30 p.m. on April 29, the NBI’s Technical Intelligence Division informed them the IMSI catcher “has already accessed something like 5,000 mobile subscribers’ identity.”
Lavin said the NBI is still securing a court order to examine the contents of the IMSI catcher as required by law.
Senate majority leader Francis Tolentino, panel chairman, said it was also possible the alleged Chinese spy was able to obtain information from shipping companies and even from the archbishop’s office since they are also situated in Intramuros, Manila.
Lavin said it is a big possibility.
“That’s a valid and correct observation,” he added.
“The data thereon captured or obtained or accessed illegally by the IMSI catcher will be concluded during the termination of the cyber forensic examination,” he said.
Lavin said the alleged spying operation was “compartmentalized” as Tak took over the operation only on April 24.
“We missed a person who first conducted the operations on the machine. The person left the Philippines on April 24. And we believe this was a highly-compartmentalized operation because the person who took over, the person we arrested last April 29 by the name Tak Hoi Lau … he does not even know the exact identity of the person from whom he took over the operations of the machine,” he said.
Tak underwent inquest proceedings before the justice department on Wednesday last week. He is charged for misuse of devices, illegal interception and system interference both under the Cybercrime Prevention Act of 2012 and espionage under Section 1 of Commonwealth Act 616 or the Espionage Act as amended by RA 10175.
Comelec chairman George Garcia gave the assurance no data accessed from the poll body since its data storage is located some other place.
TROLL FARM
Tolentino said the denial of InfinitUs Marketing Solutions Inc. that it provided a troll farm for the Chinese Embassy in the Philippines “fell flat” after he presented more evidence to prove his allegations.
He said the denial made by Paul Li, co-founder and chief executive officer of InfinitUs, was just an alibi after Tolentino presented documents which outlined the scope of work which states the “project publicity guidance for the Chinese embassy” that cost P930,000.
He said the amount in the document matches the P930,000 payment made by the Chinese Embassy in the form of a check dated Sept. 11, 2023.
Li said the P930,000 represents the payment to his PR firm for an event they organized at the Manila Hotel on June 8, 2023, for the promotion of Philippine-China understanding, which was attended by President Ferdinand Marcos Jr. and a number of Cabinet officials, an event of the Chinese Embassy.
Li said part of the amount was used to purchase COVID-19 medical paraphernalia, to which Tolentino said was highly impossible since the World Health Organization has already officially declared that the pandemic was long over at that time.
Tolentino said another proof that InfinitUs was into providing troll farms was a notice of hiring posted at the PR firm’s office in Makati City for “employees” who must be at least 18 years old, must have a minimum of 200 followers, has a streaming record in Tiktok, and must be able to dance, sing, and engage in gaming, and willing to go “live” every day.
Li confirmed the information, which Tolentino said was proof that the company’s trolling is continuing.
Tolentino said Li was lying when he testified before committee but opted not cite him in contempt for humanitarian reasons since Li’s wife is undergoing treatment for cancer.
InfinitUs on Friday last week issued a statement denying that it is engaged in troll farms, saying such allegation are baseless.
“We categorially deny having any agreement with the Chinese embassy — or any foreign government—for troll operations, disinformation, or illicit digital activity,” the firm said.
It said that the service agreement between the company and the Chinese embassy which was presented by Tolentino during last week’s hearing was “unauthenticated, unsigned, and completely unfamiliar to our company.”
“It is, at best, a forgery crafted to fit a political narrative,” it added.
Tolentino earlier said that the Chinese embassy has employed the services of InfinitUs to provide it with a troll farm that will amplify China’s narratives amid the issues at West Philippine Sea.
He added the troll farm was also aimed at spreading disinformation to discredit government officials, including President Marcos, and to influence the results of the May 12 elections.
CHARGES
Tolentino said the “active directors” of the PR firm can be charged with treason or even espionage for collaborating with a “foreign government” to discredit government officials.
“Treason … (for) collaborating with the foreign government to put down our system, and it’s ongoing. Even though in a digital space, it undermines the sovereignty of our country, our institutions, as well as society itself. It is the highest form of betrayal to one’s flag” Tolentino said in a press conference after he presided in the fourth hearing of the committee.
Tolentino was referring to Paul Li, chief executive officer of InfinitUs; Ming Li, Paul’s business partners; and the Filipino incorporators of the firm.
According to the PR firm company registration with the Securities and Exchange Commission shared by the office of Tolentino to the media, the Filipino incorporators include Ruby Benig Gestiada, Christine Bergantinos Li, and Myka Isabel Basco.
