-
Exposed! China's Cyber Spy Ring Targets US Firms & SE Asia in Massive Hacking Spree - Congress Fights Back!
- 2024/12/17
- 再生時間： 3 分
- ポッドキャスト
カートのアイテムが多すぎます
ご購入は五十タイトルがカートに入っている場合のみです。
カートに追加できませんでした。
しばらく経ってから再度お試しください。
ウィッシュリストに追加できませんでした。
しばらく経ってから再度お試しください。
ほしい物リストの削除に失敗しました。
しばらく経ってから再度お試しください。
ポッドキャストのフォローに失敗しました
ポッドキャストのフォロー解除に失敗しました
Exposed! China's Cyber Spy Ring Targets US Firms & SE Asia in Massive Hacking Spree - Congress Fights Back!
-
サマリー
あらすじ・解説
This is your Digital Dragon Watch: Weekly China Cyber Alert podcast.
Hey there, I'm Ting, and welcome to Digital Dragon Watch, your weekly China cyber alert. Let's dive right into the latest updates from the past seven days.
First off, a significant U.S. organization with a substantial presence in China was targeted by a China-based threat actor earlier this year. According to Symantec researchers, the attack, which began in April 2024 and continued until August 2024, involved lateral movement across the organization's network, compromising multiple computers, including Exchange Servers. This suggests the attackers were gathering intelligence by harvesting emails and deploying exfiltration tools to steal targeted data[1].
In response to such growing threats, the U.S. House of Representatives unanimously approved the "Strengthening Cyber Resilience Against State-Sponsored Threats Act" on December 11, 2024. This legislation, introduced by Representatives Laurel Lee, Mark E. Green, and John Moolenaar, aims to enhance cyber resilience against state-sponsored threats, particularly those posed by the Chinese Communist Party (CCP). The bill establishes an interagency task force led by the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) to address these threats and requires annual classified reports and briefings to Congress for five years[2][5].
Furthermore, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) sanctioned Sichuan Silence Information Technology Company, Limited, and one of its employees, Guan Tianfeng, for their roles in the April 2020 compromise of tens of thousands of firewalls worldwide, including those of U.S. critical infrastructure companies[4].
In other news, researchers uncovered espionage tactics used by China-based APT groups in Southeast Asia, involving advanced tools like PlugX and reverse proxies. Additionally, the Chinese surveillance tool EagleMsgSpy was found to have been exploiting mobile devices for data collection since 2017[3].
To protect against these threats, experts recommend a focused, coordinated, and whole-of-government response. Chairman Green emphasized the need for a comprehensive approach, stating, "The threat actor 'Volt Typhoon' remained undetected and undeterred in our networks for far too long. The discovery of the new actor 'Flax Typhoon' further demonstrates the CCP's unabashed commitment to infiltrating our critical infrastructure."
In conclusion, the past week has seen significant developments in China-related cybersecurity incidents and defensive measures. It's crucial for organizations to stay vigilant and implement robust security measures to counter these evolving threats. Stay safe, and we'll catch you in the next update.
For more http://www.quietplease.ai
Get the best deals https://amzn.to/3ODvOta
Hey there, I'm Ting, and welcome to Digital Dragon Watch, your weekly China cyber alert. Let's dive right into the latest updates from the past seven days.
First off, a significant U.S. organization with a substantial presence in China was targeted by a China-based threat actor earlier this year. According to Symantec researchers, the attack, which began in April 2024 and continued until August 2024, involved lateral movement across the organization's network, compromising multiple computers, including Exchange Servers. This suggests the attackers were gathering intelligence by harvesting emails and deploying exfiltration tools to steal targeted data[1].
In response to such growing threats, the U.S. House of Representatives unanimously approved the "Strengthening Cyber Resilience Against State-Sponsored Threats Act" on December 11, 2024. This legislation, introduced by Representatives Laurel Lee, Mark E. Green, and John Moolenaar, aims to enhance cyber resilience against state-sponsored threats, particularly those posed by the Chinese Communist Party (CCP). The bill establishes an interagency task force led by the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) to address these threats and requires annual classified reports and briefings to Congress for five years[2][5].
Furthermore, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) sanctioned Sichuan Silence Information Technology Company, Limited, and one of its employees, Guan Tianfeng, for their roles in the April 2020 compromise of tens of thousands of firewalls worldwide, including those of U.S. critical infrastructure companies[4].
In other news, researchers uncovered espionage tactics used by China-based APT groups in Southeast Asia, involving advanced tools like PlugX and reverse proxies. Additionally, the Chinese surveillance tool EagleMsgSpy was found to have been exploiting mobile devices for data collection since 2017[3].
To protect against these threats, experts recommend a focused, coordinated, and whole-of-government response. Chairman Green emphasized the need for a comprehensive approach, stating, "The threat actor 'Volt Typhoon' remained undetected and undeterred in our networks for far too long. The discovery of the new actor 'Flax Typhoon' further demonstrates the CCP's unabashed commitment to infiltrating our critical infrastructure."
In conclusion, the past week has seen significant developments in China-related cybersecurity incidents and defensive measures. It's crucial for organizations to stay vigilant and implement robust security measures to counter these evolving threats. Stay safe, and we'll catch you in the next update.
For more http://www.quietplease.ai
Get the best deals https://amzn.to/3ODvOta