Wave of Stealthy China Cyberattacks Hits U.S., Private Networks, Google Says
By The Wall Street Journal, March 22, 2023
China has routinely denied hacking into businesses or governments in other countries.
Said Charles Carmakal, Mandiant’s chief technology officer, “There is a lot of intrusion activity going undetected. We think the problem is a lot bigger than we know today.”
Researchers in Google's Mandiant division found that state-sponsored hackers in China have been using techniques that allow them to evade common cybersecurity tools and spy on government and business networks for years without being detected.
The researchers said hackers are compromising devices on the edge of the network and targeting software from VMware Inc. or Citrix Systems Inc., among others, which often run on computers without antivirus or endpoint detection software.
Mandiant's Charles Carmakal said the attacks, which generally exploit previously undetected flaws, likely are more widespread than previously known.
Carmakal noted this cyberattack method "is a lot harder for us to investigate, and it is certainly exponentially harder for victims to discover these intrusions on their own. Even with our hunting techniques, it's hard for them to find it."
From The Wall Street Journal
No comments:
Post a Comment