45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage
Summary: Silent Push identified 45 previously unreported domains tied to China-linked actors Salt Typhoon and UNC4841, with the oldest registration activity dating to May 2020. The oldest domain, onlineeylity[.]com, was registered on May 19, 2020, by a fake persona named Monica Burch, and three Proton Mail addresses were used to register as many as 16 domains with non-existent addresses.
What you should know: The May 2020 registration date confirms the 2024 Salt Typhoon telecom attacks were not this group's first activity, and Silent Push urges at-risk organizations to search DNS logs going back five years for requests to these domains and their IPs.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2023-2868
- Related
- CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation Vulnerability Known Exploited Vulnerabilities · May 26, 2023