#pygmygoat — Public Fediverse posts

Look at this cute round goat.

It's a Pygmy Goat, and there's a whole pen of them at #TarongaWesternPlainsZoo

(cute as they are, they still smell like goats)

#goat #PygmyGoat #animal

NCSC Details ‘Pygmy Goat’ Backdoor Planted on Hacked Sophos Firewall Devices – Source: www.securityweek.com https://ciso2ciso.com/ncsc-details-pygmy-goat-backdoor-planted-on-hacked-sophos-firewall-devices-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #NetworkSecurity #securityweekcom #securityweek #NationState #VoltTyphoon #PygmyGoat #ChinaAPT #Fortinet #Sophos #NCSC

NCSC Details ‘Pygmy Goat’ Backdoor Planted on Hacked Sophos Firewall Devices https://www.securityweek.com/ncsc-details-pygmy-goat-backdoor-planted-on-hacked-sophos-firewall-devices/ #NetworkSecurity #Nation-State #VoltTyphoon #PygmyGoat #ChinaAPT #Fortinet #Sophos #NCSC

NCSC Details ‘Pygmy Goat’ Backdoor Planted on Hacked Sophos Firewall Devices https://www.securityweek.com/ncsc-details-pygmy-goat-backdoor-planted-on-hacked-sophos-firewall-devices/ #NetworkSecurity #Nation-State #VoltTyphoon #PygmyGoat #ChinaAPT #Fortinet #Sophos #NCSC

As a followup post, here are some other institutions who have published their own commentary on the #OperationPacificRim research that @SophosXOps published today:

The FBI posted a bulletin seeking more information about the people behind the intrusions (Sophos has identified at least some of the individuals who were involved):

https://www.fbi.gov/wanted/seeking-info/edge-device-intrusions

The UK's National Cybercrime Centre (NCSC) published their own research into malware they called #PygmyGoat (and which we named as "libsophos.so" in our report timeline (links to PDF):

https://www.ncsc.gov.uk/static-assets/documents/malware-analysis-reports/pygmy-goat/ncsc-mar-pygmy-goat.pdf

My former Sophos colleague Kristin Del Rosso previously coauthored an article for the Atlantic Council on China-originated device intrusions as a direct result of this research:

https://www.atlanticcouncil.org/in-depth-research-reports/report/sleight-of-hand-how-china-weaponizes-software-vulnerability/

@WIRED reporter @agreenberg published a great summary of the attack campaign:

https://www.wired.com/story/sophos-chengdu-china-five-year-hacker-war/

Cybersecurity firm Greynoise also published their research. Greynoise has been a consistently supporting org.

https://www.greynoise.io/blog/the-persistent-perimeter-threat-strategic-insights-from-a-multi-year-apt-campaign-targeting-edge-devices