#cyberespionage — Public Fediverse posts

T-Mobile security staff physically severed a network cable in 2024 to block Chinese state-linked Salt Typhoon hackers from reaching the carrier's infrastructure.

#SaltTyphoon #TMobile #ChinaHack #Telecommunications #CyberEspionage

https://meterpreter.org/tmobile-salt-typhoon-network-cable-cut/?utm_source=mastodon&utm_medium=jetpack_social

Counterintelligence case with aerospace implications."

A former U.S. Air Force Major is charged with allegedly conspiring to provide combat aircraft training to China’s military, coordinating with Stephen Su Bin - previously convicted in a cyber espionage case involving Boeing’s C-17 transport aircraft data.

Alleged violations include:
• International Traffic in Arms Regulations (ITAR)
• Unauthorized defense services export
• Foreign military engagement without licensing
• Historical linkage to aerospace cyber intrusion campaigns
The case underscores the convergence of:
– Human intelligence recruitment
– Cyber espionage legacy actors
– Defense contractor ecosystems
– Export control enforcement challenges
How should compliance programs at defense contractors adapt to mitigate insider expertise risks post-employment?

Engage in the comments.
Follow TechNadu for high-signal infosec and national security reporting.

Source: https://therecord.media/former-air-force-officer-arrested-for-working-with-hacker-flight-training-china

Repost to broaden awareness within the security community.

#Infosec #Counterintelligence #ITAR #AerospaceSecurity #DefenseCompliance #CyberEspionage #ThreatIntelligence #ExportControls #MilitaryTechnology #NationalSecurity

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker https://www.securityweek.com/details-emerge-on-chinese-hacking-operation-impersonating-us-lawmaker/ #cyberespionage #Nation-State #BrassTyphoon #espionage #ChinaAPT #Winnti #APT41 #China

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker https://www.securityweek.com/details-emerge-on-chinese-hacking-operation-impersonating-us-lawmaker/ #cyberespionage #Nation-State #BrassTyphoon #espionage #ChinaAPT #Winnti #APT41 #China

The Kremlin's Most Devious #Hacking Group Is Using #Russian ISPs to Plant #Spyware

The #FSB #cyberespionage group known as #Turla seems to have used its control of Russia's network #infrastructure to meddle with web traffic and trick #diplomats into #infecting their computers.
#russia #kremlin #isp

https://www.wired.com/story/russia-fsb-turla-secret-blizzard-apolloshadow-isp-cyberespionage/

Russia’s FSB-linked hacking group Turla exploits Russian ISPs to implant spyware on diplomats' devices in Moscow, hijacking internet traffic to steal sensitive data. A new espionage tactic blurs the line between surveillance and intrusion. Full story 👇🕵️‍♂️🌐 #CyberEspionage #Turla #FSB #CyberSecurity #newz

https://www.wired.com/story/russia-fsb-turla-secret-blizzard-apolloshadow-isp-cyberespionage/

GuardZoo Android Malware Attacking military personnel via WhatsApp To Steal Sensitive Data https://gbhackers.com/guardzoo-android-malware-attacks-military/ #MiddleEastSecurity #AndroidMalware #CyberEspionage #CyberCrime #Android #Malware

Trend Micro reported on the attack chain of a cyberespionage group Earth Freybug, which they claim is a subset of the Chinese state-sponsored APT41 (Winnti Group). No information about the targets or timeline, but they describe a new UNAPIMON malware used for defense evasion ( prevent child processes from being monitored). One SHA256 provided, which isn't recognized in VirusTotal. 🔗 https://www.trendmicro.com/en_us/research/24/d/earth-freybug.html

#China #cyberespionage #EarthFreybug #APT41 #Winnti #UNAPIMON #threatintel #IOC

Recorded Future publishes a 24 page report on i-SOON and their connections to offensive cyberespionage operations attributed to RedHotel, RedAlpha and POISON CARP. The links indicate that they are likely sub-teams focused on specific missions within the same company. i-SOON's victims span 22 countries, with government, telco and education being the most targeted sectors. i-SOON also supports domestic including the targeting of ethnic and religious minorities and the online gambling industry. i-SOON very likely uses and sells access to custom malware families like Winnti and ShadowPad. IOC provided. 🔗 https://www.recordedfuture.com/attributing-i-soon-private-contractor-linked-chinese-state-sponsored-groups

#ISOON #cyberespionage #China #APT #threatintel #IOC #redhotel #redalpha #poisoncarp #winnti #shadowpad

Trend Micro reports on a new China-nexus cyberespionage group (dubbed Earth Krahang) that primarily targets Southeast Asia and then Europe, America, and Africa. It has multiple connections to another Chinese APT Earth Lusca (aka Aquatic Panda, Bronze University, Charcoal Typhoon, RedHotel) and potential links to i-SOON. Trend Micro was able to retrieve multiple files from Earth Krahang’s servers, including samples, configuration files, and log files from its attack tools. MITRE ATT&CK TTPs and IOC provided. 🔗 https://www.trendmicro.com/en_us/research/24/c/earth-krahang.html

#EarthKrahang #cyberespionage #EarthLusca #AquaticPanda #CharcoalTyphoon #RedHotel #China #APT #IOC #threatintel #MITREATTACK