Chinese Hacking Groups Used Shared Attack Tool Against US Aerospace Firms, NGOs
Multiple China-linked espionage groups used the same high-value hacking capability against U.S. targets, sometimes through fake media and policy websites.
Chinese cyber-espionage groups have been observed using the same advanced hacking tool in campaigns targeting various U.S. entities, including aerospace companies, NGOs, and commodity traders. Cybersecurity firms Volexity and Proofpoint independently found evidence suggesting coordinated sharing and adoption of this tool within China’s cyber-espionage community. The widespread use indicates a potential coordinated effort, with multiple groups customizing and deploying the core capability.
- Chinese cyber-espionage groups are using the same sophisticated hacking tool.
- Targets include U.S. aerospace companies, NGOs, mining companies, and commodity traders.
- Two cybersecurity firms, Volexity and Proofpoint, independently investigated the activity.
- Evidence suggests coordinated sharing and customization of the tool within China’s cyber-espionage community.
- Multiple groups adopted the tool within days of each other.
- Most observed clusters have a suspected China nexus.
Write a comment