Source article from HITBSecNews: Leaked docs reveal how Chinese state-aligned hackers spy on citizens, foreigners
I have some question, of course, maybe you all know the answers...
A trove of leaked documents from a Chinese state-linked hacking group shows that Beijing’s intelligence and military groups are carrying out large-scale, systematic cyber intrusions against foreign governments, companies and infrastructure — exploiting what the hackers claim are vulnerabilities in U.S. software from companies including Microsoft, Apple and Google.
Question 1 -
The term "Chinese state-linked" means what exactly? Are they "hired" groups (mercenary-esque) who were simply engaged by representatives of the Chinese government? Are they hacking groups who are somehow "loyal" to the Chinese government? Is this sort of like how everyone who hates us in the Middle East is now reported as Iran-linked? I only ask because I always thought of these 'hacking' groups as obtusely non-state-aligned... (except maybe for money.)
Question 2 -
These vulnerabilities they identify in the software of magnificent multinational super-elite software companies... how is it that they are not 'fixed?' Too expensive?
It seems unfair to post more of the content here, since it is a brutally short article, but if you are interested in the kind of "enterprises" that governments go to when they want this kind of work done... this might be a good starting place... when you 'drill down' to their source, the Washington Post, you'll find...
... The documents come from iSoon, also known as Auxun, a Chinese firm headquartered in Shanghai that sells third-party hacking and data-gathering services to Chinese government bureaus, security groups and state-owned enterprises.
The trove does not include data extracted from Chinese hacking operations but lists targets and — in many cases — summaries of sample data amounts extracted and details on whether the hackers obtained full or partial control of foreign systems.
One spreadsheet listed 80 overseas targets that iSoon hackers appeared to have successfully breached. The haul included 95.2 gigabytes of immigration data from India and a 3 terabyte collection of call logs from South Korea’s LG U Plus telecom provider. The group also targeted other telecommunications firms in Hong Kong, Kazakhstan, Malaysia, Mongolia, Nepal and Taiwan...
Interesting stuff, no?
OK... OK... I had to add these the articles I just found... I'm sure you'll see why...
AT&T Says Outage Wasn't Cyberattack Despite Widespread Conspiracy Theories Online
((Subtitled - Social media users speculated it might have been caused by China or a "false flag" staged by "globalists."))
Law professor fears cyberattacks will 'increase, continue' in wake of pharmacy, AT&T outages - (from FOX Business)
((Subtitled - Change Healthcare attack and AT&T cyber threat false alarm transpire on same day))
Just food for thought.
I have some question, of course, maybe you all know the answers...
A trove of leaked documents from a Chinese state-linked hacking group shows that Beijing’s intelligence and military groups are carrying out large-scale, systematic cyber intrusions against foreign governments, companies and infrastructure — exploiting what the hackers claim are vulnerabilities in U.S. software from companies including Microsoft, Apple and Google.
Question 1 -
The term "Chinese state-linked" means what exactly? Are they "hired" groups (mercenary-esque) who were simply engaged by representatives of the Chinese government? Are they hacking groups who are somehow "loyal" to the Chinese government? Is this sort of like how everyone who hates us in the Middle East is now reported as Iran-linked? I only ask because I always thought of these 'hacking' groups as obtusely non-state-aligned... (except maybe for money.)
Question 2 -
These vulnerabilities they identify in the software of magnificent multinational super-elite software companies... how is it that they are not 'fixed?' Too expensive?
It seems unfair to post more of the content here, since it is a brutally short article, but if you are interested in the kind of "enterprises" that governments go to when they want this kind of work done... this might be a good starting place... when you 'drill down' to their source, the Washington Post, you'll find...
... The documents come from iSoon, also known as Auxun, a Chinese firm headquartered in Shanghai that sells third-party hacking and data-gathering services to Chinese government bureaus, security groups and state-owned enterprises.
The trove does not include data extracted from Chinese hacking operations but lists targets and — in many cases — summaries of sample data amounts extracted and details on whether the hackers obtained full or partial control of foreign systems.
One spreadsheet listed 80 overseas targets that iSoon hackers appeared to have successfully breached. The haul included 95.2 gigabytes of immigration data from India and a 3 terabyte collection of call logs from South Korea’s LG U Plus telecom provider. The group also targeted other telecommunications firms in Hong Kong, Kazakhstan, Malaysia, Mongolia, Nepal and Taiwan...
Interesting stuff, no?
OK... OK... I had to add these the articles I just found... I'm sure you'll see why...
AT&T Says Outage Wasn't Cyberattack Despite Widespread Conspiracy Theories Online
((Subtitled - Social media users speculated it might have been caused by China or a "false flag" staged by "globalists."))
Law professor fears cyberattacks will 'increase, continue' in wake of pharmacy, AT&T outages - (from FOX Business)
((Subtitled - Change Healthcare attack and AT&T cyber threat false alarm transpire on same day))
Just food for thought.
