Chinese hackers attack govt ministries, military plants globally


New Delhi, Aug 9 (IANS): China-based hackers attacked military industrial plants, research institutes, government agencies and ministries in several countries and were able to even hijack the IT infrastructure of some, taking control of systems used to manage security solutions, a new report has revealed.

Researchers at cyber-security firm Kaspersky detected a wave of targeted attacks on military industrial complex enterprises and public institutions in several Eastern European countries and Afghanistan.

"In the course of our research, we were able to identify over a dozen of attacked organisations," the researchers said.

The analysis suggests that "it is highly probable that a Chinese-speaking group is behind the attacks".

The researchers tagged TA428, a Chinese-speaking APT group, behind the series of attacks using six backdoor malware.

The attackers penetrated the enterprise network using carefully crafted phishing emails.

"In the course of our investigation, we discovered that, in some cases, the attackers create phishing emails using information that is not publicly available, such as the full names of employees responsible for handling sensitive information, as well as internal codenames of projects developed by attacked organisations," the team noted.

Phishing emails contain Microsoft Word documents with embedded malicious code that exploits the CVE-2017-11882 vulnerability, which enables an attacker to execute arbitrary code without any additional user activity.

In the new series of attacks, the attackers used six different backdoors at the same time -- probably to set up redundant communication channels with infected systems in case one of the malicious programmes was detected and removed by a security solution.

"The backdoors used provide extensive functionality for controlling infected systems and collecting confidential data," said Kaspersky.

The attack targeted industrial plants, design bureaus and research institutes, government agencies, ministries and departments in several East European countries (Belarus, Russia, and Ukraine), as well as Afghanistan, it added.

 

  

Top Stories


Leave a Comment

Title: Chinese hackers attack govt ministries, military plants globally



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.