China

Introducing 6 new Top Level open source ASF projects

Introducing 6 new Top Level open source ASF projects

The Apache Software Foundation (ASF) has graduated six new open source software projects to “Top Level” status in Q1 of 2023. (Getting Top-Level Project status is essentially a vote of confidence in a project’s community and product governance.) Perhaps interestingly to some, more than half (four of the six)...

The Stack April 05, 2023

China details custom offensive tools, says NSA hacked “tens of thousands of devices”

China details custom offensive tools, says NSA hacked “tens of thousands of devices”

Multiple versions of "Stoic surgeon" backdoor used in attack says CVERC

The Stack September 05, 2022

This is how Chinese hackers are breaching telcos worldwide, say US authorities

This is how Chinese hackers are breaching telcos worldwide, say US authorities

SOHO devices and unpatched enterprise switches are the way in.

Eliot Beer June 08, 2022

Kaspersky says Chinese APT demonstrating "seemingly impossible network behaviors"

Kaspersky says Chinese APT demonstrating "seemingly impossible network behaviors"

Threat group's infrastructure "nothing short of extraordinary"

Edward Targett June 02, 2022

BPFDoor: Chinese tool almost undetected for FIVE years is second BPF-based attack this year

BPFDoor: Chinese tool almost undetected for FIVE years is second BPF-based attack this year

Researchers warn of risks from extending BPF beyond Linux.

Eliot Beer May 09, 2022

Previously undocumented rootkit being deployed by Chinese APT

Previously undocumented rootkit being deployed by Chinese APT

Daxin malware has some really clever C2 techniques to exfiltrate intelligence

The Stack March 02, 2022

"MysterySnail" 0day in Win32k used to hit IT, defence firms

"MysterySnail" 0day in Win32k used to hit IT, defence firms

Kaspersky, NSA report critical vulns, one used in a major campaign.

The Stack October 13, 2021

Revealed: Over 50 TTPs of Chinese state-backed hackers APT 40

Revealed: Over 50 TTPs of Chinese state-backed hackers APT 40

APT exfiltrated data using Dropbox API, steganography to hide hoard in GitHub

Edward Targett July 19, 2021