Tag: china
-
CVE-2024-21887 and More: How Earth Estries APT Group Exploits VPNs Servers
In a detailed report from Trend Micro, the Chinese advanced persistent threat (APT) group Earth Estries, also known by aliases like Salt Typhoon and GhostEmperor, has emerged as a significant... First seen on securityonline.info Jump to article: securityonline.info/cve-2024-21887-and-more-how-earth-estries-apt-group-exploits-vpns-servers/
-
Salt Typhoon Builds Out Malware Arsenal With GhostSpider
The APT, aka Earth Estries, is one of China’s most effective threat actors, performing espionage for sometimes years on end against telcos, ISPs, and governments before being detected. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/salt-typhoon-malware-arsenal-ghostspider
-
Chinese APT Hackers Using Multiple Tools And Vulnerabilities To Attack Telecom Orgs
Tags: apt, attack, backdoor, china, control, cyber, exploit, government, group, hacker, infrastructure, rat, tool, vulnerabilityEarth Estries, a Chinese APT group, has been actively targeting critical sectors like telecommunications and government entities since 2023. They employ advanced techniques, including exploiting vulnerabilities, lateral movement, and deploying multiple backdoors like GHOSTSPIDER, SNAPPYBEE, and MASOL RAT, which have impacted Southeast Asia significantly. The group makes use of a sophisticated command and control infrastructure…
-
Chinese Hackers Exploiting Critical Vulnerability in Array Networks Gateways
CISA warns about attacks exploiting CVE-2023-28461, a critical vulnerability in Array Networks AG and vxAG secure access gateways. The post Chinese Hackers Exploiting Critical Vulnerability in Array Networks Gateways appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/chinese-hackers-exploiting-critical-vulnerability-in-array-networks-gateways/
-
Aggressive Chinese APT Group Targets Governments with New Backdoors
A Trend Micro analysis of Earth Estries found that the Chinese threat actor is using new backdoors to avoid detection during espionage operations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-apt-governments-backdoors/
-
Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ Countries
The China-linked threat actor known as Earth Estries has been observed using a previously undocumented backdoor called GHOSTSPIDER as part of its attacks targeting Southeast Asian telecommunications companies. Trend Micro, which described the hacking group as an aggressive advanced persistent threat (APT), said the intrusions also involved the use of another cross-platform backdoor dubbed First…
-
North Korean and Chinese Threat Actors Target Crypto, Aerospace, and Government Agencies
Tags: china, crypto, cyber, government, intelligence, korea, microsoft, north-korea, tactics, threatAt CYBERWARCON 2024, Microsoft Threat Intelligence unveiled groundbreaking research on two major nation-state cyber actors: North Korea and China. These revelations provide a closer look at their tactics, techniques, and... First seen on securityonline.info Jump to article: securityonline.info/north-korean-and-chinese-threat-actors-target-crypto-aerospace-and-government-agencies/
-
Thai police arrested Chinese hackers involved in SMS blaster attacks
Thai authorities arrested fraud gangs in Bangkok for SMS blaster attacks, they used fake cell towers to send thousands of malicious SMS messages to nearby phones. Thai authorities arrested members of two Chinese cybercrime organizations, one of these groups carried out SMS blaster attacks. The crooks were driving through Bangkok’s streets while sending hundreds of…
-
Former Verizon employee gets four-year sentence for sharing cyber secrets with Chinese government
First seen on therecord.media Jump to article: therecord.media/former-verizon-worker-sentenced-china
-
GLASSBRIDGE: Google Blocks Thousands of Pro-China Fake News Sites
Google reveals GLASSBRIDGE: A network of thousands of fake news sites pushing pro-China narratives globally. These sites, run by PR firms, spread disinformation and lack transparency. First seen on hackread.com Jump to article: hackread.com/glassbridge-google-blocks-pro-china-fake-news-sites/
-
China’s Salt Typhoon hackers target telecom firms in Southeast Asia with new malware
First seen on therecord.media Jump to article: therecord.media/china-salt-typhoon-targets-southeast-asia-telecom
-
Chinese hack of US telcos prompts White House meeting
Tags: chinaFirst seen on scworld.com Jump to article: www.scworld.com/brief/chinese-hack-of-us-telcos-prompts-white-house-meeting
-
CrowdStrike’s Adam Meyers On ‘Up-Leveled’ Hacking By China, Threats To MSPs
The uncovering of a second China-linked threat group focused on compromising telecommunications firms is a clear warning to all service providers that have access to client IT environments, CrowdStrike’s threat intelligence head tells CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2024/crowdstrike-s-adam-meyers-on-up-leveled-hacking-by-china-threats-to-msps
-
China has utterly pwned ‘thousands and thousands’ of devices at US telcos
Senate Intelligence Committee chair says his ‘hair is on fire’ as execs front the White House First seen on theregister.com Jump to article: www.theregister.com/2024/11/25/salt_typhoon_mark_warner_warning/
-
North Korea Deploying Fake IT Workers in China, Russia, Other Countries
The North Korean fake IT workers have infiltrated businesses in China, Russia, and other countries aside from the US. The post North Korea Deploying Fake IT Workers in China, Russia, Other Countries appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/north-korea-deploying-fake-it-workers-in-china-russia-other-countries/
-
US National Security Officials Brief Telecom Executives
National Security Officials Share Intelligence on a Cyberespionage Campaign. The White House on Friday hosted U.S. telecommunications executives to review the country’s cyber resilience posture and share intelligence pertaining to China’s significant cyberespionage campaign targeting the sector, which the FBI continues to probe. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/us-national-security-officials-brief-telecom-executives-a-26897
-
China Has Pwned Thousands And Thousands Of Telco Devices
Tags: chinaFirst seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36637/China-Has-Pwned-Thousands-And-Thousands-Of-Telco-Devices.html
-
Huge Leak of Customer Data Includes Military Personnel Info
EnamelPins, which manufactures and sells medals, pins, and other emblematic accessories, for months left open an Elasticsearch instance that exposed 300,000 customer emails, including 2,500 from military and government personnel. The company, based in California, also has links to China, Cybernews researchers wrote. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/huge-leak-of-customer-data-includes-military-personnel-info/
-
Salt Typhoon hackers backdoor telcos with new GhostSpider malware
The Chinese state-sponsored hacking group Salt Typhoon has been observed utilizing a new “GhostSpider” backdoor in attacks against telecommunication service providers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/salt-typhoon-hackers-backdoor-telcos-with-new-ghostspider-malware/
-
Bangkok busts SMS Blaster sending 1 million scam texts from a van
The Thai police, working together with Thailand’s largest telecommunications service provider, Advanced Info Service (AIS), located and busted the Chinese operators of an SMS blaster device that spammed fraudulent messages across Bangkok. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/bangkok-busts-sms-blaster-sending-1-million-scam-texts-from-a-van/
-
The Cyberthreats from China are Ongoing: U.S. Officials
U.S. officials are pushing back at the ongoing threats posted by Chinese state-sponsored hackers like Volt Typhoon and Salt Typhoon, which have infiltrated critical infrastructure organizations to steal information and preposition themselves in case of a conflict breaking out between the two countries. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/the-cyberthreats-from-china-are-ongoing-u-s-officials/
-
Google Deindexes Chinese Propaganda Network
Google’s threat intelligence team uncovered four Chinese PR firms operating networks of inauthentic news sites First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/google-deindexes-chinese/
-
ISMG Editors: China-Linked Espionage Targets US Telecoms
Also: Highlights from ISMG’s Financial Services Summit and Key Insights on AI Adoption. On the 200th episode of the ISMG Editors’ Panel, the team discussed the major China-linked cyberespionage campaign targeting U.S. telecommunications, highlighted key insights from ISMG’s Financial Services Summit in New York and unpacked the top findings from ISMG’s annual Generative AI Survey.…
-
North Korea’s Cyber Evolution and China’s Storm-2077 Unveiled by Microsoft Analysts
Tags: attack, china, cyber, cybersecurity, intelligence, korea, microsoft, north-korea, strategy, tactics, threatMicrosoft Threat Intelligence analysts has shared new insights into North Korean and Chinese threat actors. At the recent CYBERWARCON, cybersecurity analyst shared details into the rise of attacks, the evolution of threat actor tactics, and the strategies employed by various state-backed groups. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/microsoft-insights-on-chinese-threat-actor/
-
Google blocked 1,000-plus pro-China fake news websites from its search results
Beijing’s propaganda buddies aren’t just using social media First seen on theregister.com Jump to article: www.theregister.com/2024/11/25/google_beijing_propaganda/
-
Imagine a land in which Big Tech can’t send you down online rabbit holes or use algorithms to overcharge you
China is trying to become that land, with a government crackdown on the things that make the internet no fun First seen on theregister.com Jump to article: www.theregister.com/2024/11/25/china_algorithm_transparency/
-
Security Affairs newsletter Round 499 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. A cyberattack on gambling giant IGT disrupted portions of its IT systems China-linked APT Gelsemiumuses a new Linux…
-
China-linked APT Gelsemium uses a new Linux backdoor dubbed WolfsBane
China-linked APT Gelsemium has been observed using a new Linux backdoor dubbed WolfsBane in attacks targeting East and Southeast Asia. China-linked APT Gelsemium has deployed a previously unknown Linux backdoor, WolfsBane, in attacks targeting East and Southeast Asia, according to ESET. Victims include entities in Taiwan, the Philippines, and Singapore, as seen in VirusTotal samples from…
-
Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites
Government agencies and non-governmental organizations in the United States have become the target of a nascent China state threat actor known as Storm-2077.The adversary, believed to be active since at least January 2024, has also conducted cyber attacks against the Defense Industrial Base (DIB), aviation, telecommunications, and financial and legal services across the world, Microsoft…