Chinese Malicious Cyber Activity

ronjor · Aug 3, 2020

Original release date: August 03, 2020

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Defense (DoD) have identified a malware variant—referred as TAIDOOR—used by the Chinese government. In addition, U.S. Cyber Command has released the malware sample to the malware aggregation tool and repository, VirusTotal.
CISA encourages users and administrators to review Malware Analysis Report MAR-10292089-1.v1, U.S. Cyber Command’s VirusTotal page
, and CISA’s Chinese Malicious Cyber Activity page for more information.
Click to expand...

ronjor · Sep 14, 2020

AA20-258A: Chinese Ministry of State Security-Affiliated Cyber Threat Actor Activity
09/14/2020

Original release date: September 14, 2020
Summary
The Cybersecurity and Infrastructure Security Agency (CISA) has consistently observed Chinese Ministry of State Security (MSS)-affiliated cyber threat actors using publicly available information sources and common, well-known tactics, techniques, and procedures (TTPs) to target U.S. Government agencies. CISA has observed these—and other threat actors with varying degrees of skill—routinely using open-source information to plan and execute cyber operations. CISA leveraged the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) and Pre-ATT&CK frameworks to characterize the TTPs used by Chinese MSS-affiliated actors. This product was written by CISA with contributions by the Federal Bureau of Investigation (FBI).
Click to expand...

ronjor · Sep 14, 2020

Chinese Government-affiliated Malicious Cyber Actors Targeting U.S. Government Agencies

Original release date: September 14, 2020
The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have issued an advisory about Chinese Ministry of State Security (MSS)-affiliated cyber threat actors targeting U.S. government agencies. Through the National Cybersecurity Protection System, CISA has observed Chinese MSS-affiliated cyber threat actors operating from the People’s Republic of China using commercially available information sources and open-source exploitation tools.
CISA leveraged the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) and Pre-ATT&CK frameworks to characterize the tactics, techniques, and procedures (TTPs) used by Chinese MSS-affiliated actors. CISA encourages users and administrators to review the joint cybersecurity advisory and CISA's Chinese Malicious Cyber Activity page for more information.
Click to expand...

guest · Oct 20, 2020

NSA Releases Advisory on Chinese State-Sponsored Actors Exploiting Publicly Known Vulnerabilities
October 20, 2020
https://us-cert.cisa.gov/ncas/curre...ory-chinese-state-sponsored-actors-exploiting

The National Security Agency (NSA) has released a cybersecurity advisory on Chinese state-sponsored malicious cyber activity. This advisory provides 25 Common Vulnerabilities and Exposures (CVEs) known to be recently leveraged, or scanned-for, by Chinese state-sponsored cyber actors to enable successful hacking operations against a multitude of victim networks.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages critical system administrators to prioritize the immediate patching of the CVEs in NSA’s advisory and to review CISA’s Alert Potential for China Cyber Response to Heightened U.S.–China Tensions, which details potential cyber response to heightened tensions between the United States and China and provides specific tactics, techniques, and procedures (TTPs) and recommended mitigations to the cybersecurity community to assist in the protection of our Nation’s critical infrastructure.
Click to expand...

Review the CISA's Chinese Malicious Cyber Activity page for more information on Chinese malicious cyber activity.
Click to expand...

guest · Oct 27, 2020

mood said: ↑

NSA Releases Advisory on Chinese State-Sponsored Actors Exploiting Publicly Known Vulnerabilities October 20, 2020
Click to expand...

Measuring the Global Impact of the NSA’s Top 25 Vulnerabilities Being Exploited In the Wild
October 27, 2020
https://blog.checkpoint.com/2020/10...-vulnerabilities-being-exploited-in-the-wild/

On Tuesday October 20, 2020, the NSA published a detailed report informing the public of the top 25 vulnerabilities currently being leveraged and exploited by Chinese hacking groups.

The list is mostly composed of high-profile vulnerabilities, such as SIGRed (CVE-2020-1350), BlueKeep (CVE-2019-0708) and CurveBall (CVE-2020-0601). Furthermore, the list encompasses a number of popular products and vendors, including Microsoft, Adobe, Citrix, and Atlassian. The majority of the vulnerabilities outlined by the report date from 2020, while the rest are from previous years.

The impact of such attacks can be severe, ranging from file disclosure to the execution of arbitrary commands on affected systems. Check Point provides comprehensive coverage to the vulnerabilities listed in NSA’s report.
Click to expand...

Log in or Sign up

Chinese Malicious Cyber Activity

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

Log in or Sign up

Chinese Malicious Cyber Activity

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

guest Guest

Useful Searches