Chinese Hacking Groups Used Shared Attack Tool Against US Aerospace Firms, NGOs
Multiple China-linked espionage groups used the same high-value hacking capability against U.S. targets, sometimes through fake media and policy websites.
TL;DR
- Chinese cyber-espionage groups are using the same sophisticated hacking tool.
- Targets include U.S. aerospace companies, NGOs, mining companies, and commodity traders.
- Two cybersecurity firms, Volexity and Proofpoint, independently investigated the activity.
- Evidence suggests coordinated sharing and customization of the tool within China's cyber-espionage community.
- Multiple groups adopted the tool within days of each other.
- Most observed clusters have a suspected China nexus.