Forest Global Training Partners

Cyber Risks · Krebs on Security

New Leak Shows Business Side of China’s APT Menace

Summary: A cache of more than 500 documents published to GitHub last week appears to come from i-SOON, a Shanghai technology company known for cybersecurity training, and shows employees initiating and sustaining cyberespionage campaigns commissioned by Chinese government agencies against systems in the United Kingdom and countries throughout Asia. Security experts who reviewed the data believe it is legitimate, and say i-SOON works closely with China's Ministry of Public Security and the military; the company established a department for APT network penetration research in 2013 and was named one of Sichuan province's top 30 information security companies in 2021.

Bottom line: SentinelOne's Dakota Cary calls the leak some of the most concrete public detail yet on how government targeting requirements drive a competitive marketplace of independent contractor hackers-for-hire - a market where, as former NSA computer scientist Dave Aitel puts it, there are layers of contractors all the way down.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related