home.social

#apt40 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #apt40, aggregated by home.social.

  1. Here is a cautionary notice from the #ASD regarding #APT40 / PRC MSS operations. It provides valuable insights into the tactics, techniques, and procedures of the threat actor. It is a fascinating document that sheds light on the activities of APT40/PRC MSS. #Threatactor #ttp #advisory > Cyber.gov.au cyber.gov.au/about-us/view-all

  2. Chinese state-backed threat group group #APT40 called out for hacking campaigns which use small-office and home-office devices as a launching pad for attacks

    "The NCSC has issued an advisory alongside partners in Australia, the US, Canada, New Zealand, Germany, the Republic of Korea and Japan, focusing on how one China state-sponsored cyber actor has carried out attacks against Australian networks.

    "The threat group APT40 has embraced the trend of exploiting vulnerable small-office and home-office (SoHo) devices as a launching pad for attacks. These devices are softer targets when they are not running the latest software, or are no longer supported with security updates, and they more easily conceal malicious traffic." #infosec

    ncsc.gov.uk/news/ncsc-and-part

  3. Western governments struggle to coordinate response to Chinese hacking

    #Chinese #hacking attempts are not isolated events. Rather, they constitute the #ecosystem in which all western governments must navigate their relationships with Beijing.

    In a report published on 27 March, Google said China “continues to lead the way for government-backed exploitation”.
    #APT31 alone has been linked to hacks in France, Finland and of Microsoft, while New Zealand said this week that another well-known Chinese hacking outfit, #APT40, attacked its parliament in 2021 (the Chinese embassy in New Zealand denied the allegations).

    A recent leak of data from the Chinese cybersecurity firm #iSoon revealed the extent to which China’s hackers for hire compete for government contracts,
    sometimes hoovering up data from foreign agencies "on spec" with the hope of selling it to the highest bidder.
    In the case of APT31, the US Department of Justice alleges that the hacking operation was💥 directly run by a provincial department of China’s ministry of state security.💥
    But in general, said Mei #Danowski, a China cybersecurity expert and author of the "Natto Thoughts" newsletter,
    🔸nearly every cybersecurity firm in China 🔸would have some sort of contract with government clients.
    With a cybersecurity industry worth an estimated $13bn, that is a lot of potential hackers.

    That leaves western governments struggling to coordinate an effective response to hacks or hacking attempts.
    In many cases, the Chinese government has #plausible #deniability about responsibility, and it is not always clear what the impact of data breaches are.
    Audrye #Wong, an assistant professor at the University of Southern California, said that while #Russian-based hacks oftene “sow discord and chaos”, #China was “more cautious” and “still very much cares about shaping perceptions of China and the Chinese Communist party”.

    Many western international security experts refer to the maxim that while Russia may be the storm, China is climate change.

    theguardian.com/world/2024/mar

  4. Western governments struggle to coordinate response to Chinese hacking

    #Chinese #hacking attempts are not isolated events. Rather, they constitute the #ecosystem in which all western governments must navigate their relationships with Beijing.

    In a report published on 27 March, Google said China “continues to lead the way for government-backed exploitation”.
    #APT31 alone has been linked to hacks in France, Finland and of Microsoft, while New Zealand said this week that another well-known Chinese hacking outfit, #APT40, attacked its parliament in 2021 (the Chinese embassy in New Zealand denied the allegations).

    A recent leak of data from the Chinese cybersecurity firm #iSoon revealed the extent to which China’s hackers for hire compete for government contracts,
    sometimes hoovering up data from foreign agencies "on spec" with the hope of selling it to the highest bidder.
    In the case of APT31, the US Department of Justice alleges that the hacking operation was💥 directly run by a provincial department of China’s ministry of state security.💥
    But in general, said Mei #Danowski, a China cybersecurity expert and author of the "Natto Thoughts" newsletter,
    🔸nearly every cybersecurity firm in China 🔸would have some sort of contract with government clients.
    With a cybersecurity industry worth an estimated $13bn, that is a lot of potential hackers.

    That leaves western governments struggling to coordinate an effective response to hacks or hacking attempts.
    In many cases, the Chinese government has #plausible #deniability about responsibility, and it is not always clear what the impact of data breaches are.
    Audrye #Wong, an assistant professor at the University of Southern California, said that while #Russian-based hacks oftene “sow discord and chaos”, #China was “more cautious” and “still very much cares about shaping perceptions of China and the Chinese Communist party”.

    Many western international security experts refer to the maxim that while Russia may be the storm, China is climate change.

    theguardian.com/world/2024/mar

  5. Western governments struggle to coordinate response to Chinese hacking

    #Chinese #hacking attempts are not isolated events. Rather, they constitute the #ecosystem in which all western governments must navigate their relationships with Beijing.

    In a report published on 27 March, Google said China “continues to lead the way for government-backed exploitation”.
    #APT31 alone has been linked to hacks in France, Finland and of Microsoft, while New Zealand said this week that another well-known Chinese hacking outfit, #APT40, attacked its parliament in 2021 (the Chinese embassy in New Zealand denied the allegations).

    A recent leak of data from the Chinese cybersecurity firm #iSoon revealed the extent to which China’s hackers for hire compete for government contracts,
    sometimes hoovering up data from foreign agencies "on spec" with the hope of selling it to the highest bidder.
    In the case of APT31, the US Department of Justice alleges that the hacking operation was💥 directly run by a provincial department of China’s ministry of state security.💥
    But in general, said Mei #Danowski, a China cybersecurity expert and author of the "Natto Thoughts" newsletter,
    🔸nearly every cybersecurity firm in China 🔸would have some sort of contract with government clients.
    With a cybersecurity industry worth an estimated $13bn, that is a lot of potential hackers.

    That leaves western governments struggling to coordinate an effective response to hacks or hacking attempts.
    In many cases, the Chinese government has #plausible #deniability about responsibility, and it is not always clear what the impact of data breaches are.
    Audrye #Wong, an assistant professor at the University of Southern California, said that while #Russian-based hacks oftene “sow discord and chaos”, #China was “more cautious” and “still very much cares about shaping perceptions of China and the Chinese Communist party”.

    Many western international security experts refer to the maxim that while Russia may be the storm, China is climate change.

    theguardian.com/world/2024/mar

  6. Western governments struggle to coordinate response to Chinese hacking

    #Chinese #hacking attempts are not isolated events. Rather, they constitute the #ecosystem in which all western governments must navigate their relationships with Beijing.

    In a report published on 27 March, Google said China “continues to lead the way for government-backed exploitation”.
    #APT31 alone has been linked to hacks in France, Finland and of Microsoft, while New Zealand said this week that another well-known Chinese hacking outfit, #APT40, attacked its parliament in 2021 (the Chinese embassy in New Zealand denied the allegations).

    A recent leak of data from the Chinese cybersecurity firm #iSoon revealed the extent to which China’s hackers for hire compete for government contracts,
    sometimes hoovering up data from foreign agencies "on spec" with the hope of selling it to the highest bidder.
    In the case of APT31, the US Department of Justice alleges that the hacking operation was💥 directly run by a provincial department of China’s ministry of state security.💥
    But in general, said Mei #Danowski, a China cybersecurity expert and author of the "Natto Thoughts" newsletter,
    🔸nearly every cybersecurity firm in China 🔸would have some sort of contract with government clients.
    With a cybersecurity industry worth an estimated $13bn, that is a lot of potential hackers.

    That leaves western governments struggling to coordinate an effective response to hacks or hacking attempts.
    In many cases, the Chinese government has #plausible #deniability about responsibility, and it is not always clear what the impact of data breaches are.
    Audrye #Wong, an assistant professor at the University of Southern California, said that while #Russian-based hacks oftene “sow discord and chaos”, #China was “more cautious” and “still very much cares about shaping perceptions of China and the Chinese Communist party”.

    Many western international security experts refer to the maxim that while Russia may be the storm, China is climate change.

    theguardian.com/world/2024/mar

  7. Western governments struggle to coordinate response to Chinese hacking

    #Chinese #hacking attempts are not isolated events. Rather, they constitute the #ecosystem in which all western governments must navigate their relationships with Beijing.

    In a report published on 27 March, Google said China “continues to lead the way for government-backed exploitation”.
    #APT31 alone has been linked to hacks in France, Finland and of Microsoft, while New Zealand said this week that another well-known Chinese hacking outfit, #APT40, attacked its parliament in 2021 (the Chinese embassy in New Zealand denied the allegations).

    A recent leak of data from the Chinese cybersecurity firm #iSoon revealed the extent to which China’s hackers for hire compete for government contracts,
    sometimes hoovering up data from foreign agencies "on spec" with the hope of selling it to the highest bidder.
    In the case of APT31, the US Department of Justice alleges that the hacking operation was💥 directly run by a provincial department of China’s ministry of state security.💥
    But in general, said Mei #Danowski, a China cybersecurity expert and author of the "Natto Thoughts" newsletter,
    🔸nearly every cybersecurity firm in China 🔸would have some sort of contract with government clients.
    With a cybersecurity industry worth an estimated $13bn, that is a lot of potential hackers.

    That leaves western governments struggling to coordinate an effective response to hacks or hacking attempts.
    In many cases, the Chinese government has #plausible #deniability about responsibility, and it is not always clear what the impact of data breaches are.
    Audrye #Wong, an assistant professor at the University of Southern California, said that while #Russian-based hacks oftene “sow discord and chaos”, #China was “more cautious” and “still very much cares about shaping perceptions of China and the Chinese Communist party”.

    Many western international security experts refer to the maxim that while Russia may be the storm, China is climate change.

    theguardian.com/world/2024/mar

  8. New Zealand shares their own Chinese #cyberespionage problems: “The GCSB’s National Cyber Security Centre (NCSC) completed a robust technical assessment following a compromise of the Parliamentary Counsel Office and the Parliamentary Service in 2021, and has attributed this activity to a PRC state-sponsored group known as APT40" 🔗 beehive.govt.nz/release/parlia

    APT40—aka BRONZE MOHAWK, FEVERDREAM, G0065, Gadolinium, GreenCrash, Hellsing, Kryptonite Panda, Leviathan, MUDCARP, Periscope, Temp.Periscope, and Temp.Jumper is a Chinese Advanced Persistent Threat (APT) group associated with China’s MSS Hainan State Security Department. On July 19, 2021, the U.S. Department of Justice (DOJ) unsealed an indictment against four APT40 cyber actors for their illicit computer network exploitation (CNE) activities via front company Hainan Xiandun Technology Development Company (Hainan Xiandun).

    #China #news #newzealand #APT40

  9. Die USA, EU und weitere sehen es als erwiesen an, dass China für die gezielten Angriffe auf Microsoft Exchange Server verantwortlich ist.
    USA, EU und Verbündete werfen China Angriffe auf Microsoft Exchange Server vor