Tag: china
-
Chinese espionage group leans on open-source tools to mask intrusions
Sysdig researchers say UNC5174’s use of open-source tools like VShell and WebSockets has likely helped the group mask its presence in other campaigns. First seen on cyberscoop.com Jump to article: cyberscoop.com/chinese-espionage-group-unc5174-open-source-tools/
-
Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool
The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant of a known malware dubbed SNOWLIGHT and a new open-source tool called VShell to infect Linux systems.”Threat actors are increasingly using open source tools in their arsenals for cost-effectiveness and obfuscation to save money and, in this…
-
China-Backed Threat Actor ‘UNC5174’ Using Open Source Tools in Stealthy Attacks
Sysdig researchers detailed an ongoing campaign from China-backed threat actor UNC5174, which is using open source hacking tools to stay under the radar. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/china-threat-actor-unc5174-open-source-stealthy-attacks
-
China alleges US cyber espionage during the Asian Winter Games, names 3 NSA agents
Tags: attack, breach, china, cloud, cyber, cyberattack, espionage, exploit, government, hacker, infrastructure, injection, intelligence, international, service, sql, vulnerabilityA deliberate and coordinated campaign: The NCVERC report revealed that between January 26 and February 14, 2025, the Games’ information systems were struck by 270,167 attacks from abroad, with activity peaking on February 8, the day after the event’s formal opening. Of these, 170,864 attacks (63.24%) originated from US-based IP addresses.The cyber onslaught primarily targeted…
-
The Code to Survival: Taiwan’s Cybersecurity Pivot Explained
Taiwan is gearing up to launch a state-of-the-art cybersecurity center this August, amid mounting threats from the Chinese state and rapidly advancing technologies like artificial intelligence and quantum computing. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/taiwan-to-launch-cybersecurity-center/
-
China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games
China accuses three alleged U.S. NSA operatives of cyberattacks targeting critical infrastructure and the Asian Games in Harbin. The post China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/china-pursuing-3-alleged-us-operatives-over-cyberattacks-during-asian-games/
-
EU gives staff ‘burner phones, laptops’ for US visits
That would put America on the same level as China for espionage First seen on theregister.com Jump to article: www.theregister.com/2025/04/15/ec_burner_devices/
-
China-Nexus APT Exploits Ivanti Connect Secure VPN in Global Cyber Espionage Campaign
A recent report by TeamT5 has uncovered a widespread cyber espionage campaign targeting Ivanti Connect Secure VPN appliances. First seen on securityonline.info Jump to article: securityonline.info/china-nexus-apt-exploits-ivanti-connect-secure-vpn-in-global-cyber-espionage-campaign/
-
US critical infrastructure attacks reportedly acknowledged by China
First seen on scworld.com Jump to article: www.scworld.com/brief/us-critical-infrastructure-attacks-reportedly-acknowledged-by-china
-
Chinese police ensnaring Tibetans over phone and internet activity, Human Rights Watch says
Dozens of people in Tibet have been arrested by Chinese authorities in recent years for “simply using a cellphone,” according to the nonprofit Human Rights Watch. First seen on therecord.media Jump to article: therecord.media/tibetans-arrests-internet-phone-use-china
-
Spionage: EU-Beamte erhalten Wegwerfhandys vor USA-Besuch
Digitale Vorsichtsmaßnahmen bei Besuchen in China sind inzwischen üblich. Diese Notwendigkeit sieht die EU-Kommission nun auch für die USA. First seen on golem.de Jump to article: www.golem.de/news/spionage-eu-beamte-erhalten-wegwerfhandys-vor-usa-besuch-2504-195353.html
-
Chinese APTs Exploit EDR ‘Visibility Gap’ for Cyber Espionage
Blind spots in network visibility, including in firewalls, IoT devices, and the cloud, are being exploited by Chinese state-backed threat actors with increasing success, according to new threat intelligence. Here’s how experts say you can get eyes on it all. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/chinese-apt-exploit-edr-visibility-gap-cyber-espionage
-
Taiwan charges Chinese ship captain with breaking subsea cables
Tags: chinaThe captain of a Chinese-crewed ship has been charged in Taiwan with breaking a subsea cable near the island, the first such formal charge following almost a dozen similar incidents in recent years. First seen on therecord.media Jump to article: therecord.media/taiwan-charges-ship-captain-submarine-cable-break
-
Rep. Green on CISA cuts, China hacking and cyber as a bipartisan issue
The chair of the House Homeland Security Committee said his panel was prepared to take on pressing cyber policy challenges, like an estimated cyber workforce shortage of 50,000 professionals and burdensome digital compliance. First seen on therecord.media Jump to article: therecord.media/mark-green-interview-cisa-cuts-china-hacking
-
Chinese APT Group Targets Ivanti VPN Vulnerabilities to Breach Networks
Tags: apt, attack, breach, china, cyber, cybersecurity, data-breach, group, ivanti, network, threat, vpn, vulnerabilityIn a concerning report from cybersecurity firm TeamT5, it has been revealed that a Chinese Advanced Persistent Threat (APT) group leveraged critical vulnerabilities in Ivanti Connect Secure VPN appliances to launch a global cyberattack. The breach affected nearly 20 industries across 12 countries, leaving networks exposed and under persistent threat. Global Victimology The widespread attack…
-
US Blocks Foreign Governments from Acquiring Citizen Data
The US government has implemented a program that applies export controls on data transactions to certain countries of concern, including China and Russia First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-foreign-governments-acquiring/
-
DoJ Launches Critical National Security Program to Protect Americans’ Sensitive Data
The U.S. Department of Justice has launched a landmark initiative to block foreign adversaries”, including China, Russia, and Iran”, from exploiting commercial channels to access sensitive American data. The Data Security Program (DSP), enacted under Executive Order 14117, establishes stringent controls over transactions involving U.S. government-related data and bulk personal information such as genomic, financial,…
-
Brass Typhoon: The Chinese Hacking Group Lurking in the Shadows
Though less well-known than groups like Volt Typhoon and Salt Typhoon, Brass Typhoon, or APT 41, is an infamous, longtime espionage actor that foreshadowed recent telecom hacks. First seen on wired.com Jump to article: www.wired.com/story/brass-typhoon-china-cyberspies/
-
Smishing Triad: The Scam Group Stealing the World’s Riches
Millions of scam text messages are sent every month. The Chinese cybercriminals behind many of them are expanding their operations”, and quickly innovating. First seen on wired.com Jump to article: www.wired.com/story/smishing-triad-scam-group/
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 41
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads BadBazaar: iOS and Android Surveillanceware by China’s APT15 Used to Target Tibetans and Uyghurs GOFFEE continues to attack organizations in Russia Atomic…
-
China Secretly (and Weirdly) Admits It Hacked US Infrastructure
Plus: The Department of Homeland Security begins surveilling immigrants’ social media, President Donald Trump targets former CISA director who refuted his claims of 2020 election fraud, and more. First seen on wired.com Jump to article: www.wired.com/story/china-admits-hacking-us-infrastructure/
-
Vom Handelskrieg zum Cyberkrieg: Das Risiko für chinesische Cyberangriffe steigt
China könnte sich mit Cyberangriffen auf kritische US-Infrastruktur für die Zollpolitik rächen. Mögliche Angriffspunkte sind schon seit Jahren infiltriert. First seen on golem.de Jump to article: www.golem.de/news/vom-handelskrieg-zum-cyberkrieg-das-risiko-fuer-chinesische-cyberangriffe-steigt-2504-195288.html
-
Datenschutz ist nicht gleich Datenschutz: Wie USA, China und EU damit umgehen
Der Datenschutz ist ein wichtiger Indikator für das Werteverständnis eines Landes oder eines Staatenbundes. Gleichzeitig ist er aber auch ein elementarer Faktor im weltweiten Ringen um wirtschaftliche, politische und militärische Macht. Die einflussreichsten Wirtschaftsregionen USA, China und EU haben dabei sehr unterschiedliche Vorstellungen über den Sinn, den Zweck und die Grenzen von Datenschutz. Die… First…
-
Ex-Meta exec tells Senate Zuck dangled US citizen data in bid to enter China
Former policy boss claims Facebook cared little about national security as it chased the mighty Yuan First seen on theregister.com Jump to article: www.theregister.com/2025/04/11/meta_senate_china/
-
Google Cloud: China Achieves “Cyber Superpower” Status
Google Cloud’s Sandra Joyce said that Chinese state actors’ advanced techniques and ability to stay undetected pose huge challenges First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/google-cloud-china-cyber/
-
Domain Reputation Update Oct 2024 Mar 2025
New domains are up 7.39%, with 2.9 million malicious domains detected. Chinese gambling sites dominate the Top 20 TLDs, while .top remains a hotspot for abuse – this time with a spike in toll road scams. Read the full report here. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/domain-reputation-update-oct-2024-mar-2025/
-
Sweden arrests senior Uyghur representative on suspicion of spying for China
Tags: chinaThe World Uyghur Congress confirmed that one of its officials had been arrested in Sweden on suspicion of spying on fellow Uyghurs on behalf of China. First seen on therecord.media Jump to article: therecord.media/sweden-arrest-spying-on-uyghurs-china
-
APT32 Turns GitHub into a Weapon Against Security Teams and Enterprise Networks
Southeast Asian Advanced Persistent Threat (APT) group OceanLotus, also known as APT32, has been identified as employing GitHub to conduct a sophisticated poison attack against Chinese cybersecurity professionals. The ThreatBook Research and Response Team has meticulously analyzed this incident, which began its nefarious spread in mid-September 2024, resulting in a targeted assault on various Chinese…
-
Someone compromised US bank watchdog to access sensitive financial files
OCC mum on who broke into email, but Treasury fingered China in similar hack months ago First seen on theregister.com Jump to article: www.theregister.com/2025/04/09/occ_bank_email_hack/