Cyber Risks · Krebs on Security

U.S. Charges 4 Chinese Military Officers in 2017 Equifax Hack

Summary: The U.S. Justice Department unsealed a nine-count indictment against four officers of the People's Liberation Army's 54th Research Institute - Wu Zhiyong, Wang Qian, Xu Ke and Liu Lei - for the 2017 Equifax breach that exposed personal data on nearly 150 million Americans. The government says the men routed attack traffic through 34 servers in nearly 20 countries, used encrypted channels inside Equifax's network to blend in, and deleted log files daily.

Bottom line: The intruders got in through a software vulnerability on an internet-facing server that sat unpatched for four months after researchers warned it was being broadly exploited - and the FBI's Christopher Wray put the broader campaign at about a thousand investigations across all 56 field offices.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related