Cyber espionage on the rise as telecom providers compromised
Summary
Cybereason has announced the discovery of several previously unidentified cyber espionage campaigns infiltrating major telecommunications providers across Southeast Asia. The report comes on the heels of the Biden administration’s public rebuke of China’s Ministry of State Security for the recent HAFNIUM attacks that exploited vulnerabilities in unpatched Microsoft Exchange Servers and put thousands of organisations worldwide at risk. Cybereason observed a significant overlap in tactics, techniques and procedures (TTPs) across the three operations and assessed that the attackers were likely tasked with parallel objectives under the direction of a centralised coordinating body aligned with Chinese state interests. Overlaps in attacker TTPs across the clusters are evidence of a likely connection between the threat actors, supporting the assessment that each group was tasked with parallel objectives in monitoring the communications of specific high value targets under the direction of a centralized coordinating body aligned with Chinese state interests. The full report can be accessed here: DeadRinger: Exposing Chinese Threat Actors Targeting Major Telcos, and the company will also be hosting a live webinar on Thursday, August 12th, at 1:00 PM ET / 10:00 AM PT where Cybereason’s Head of Threat Research Assaf Dahan and VP of Security Practices Mor Levi will walk through the espionage operations uncovered in the DeadRinger report.