Chinese hackers are on a massive cyber espionage campaign targeting over 75 organizations throughout the world and using vulnerabilities in various routers and cloud services.
Chinese hackers may have had illicit access to a federal surveillance system for months before being discovered and rousted. The access was apparently gained by compromising US telecoms Verizon and AT&T.
Chinese hackers are now focusing on the outer layers of target networks, even antivirus software and firewalls, as an entry point for stealthy cyber attacks that can last for years.
A botnet used by a state-backed Chinese hacking group has lost at least some of its capacity, according to security officials that spoke to Reuters anonymously. The Volt Typhoon group has been targeting US critical infrastructure since at least mid-2021.
More stringent data collection rules went into effect in China at the beginning of May. The government continued to show that it is serious about its regulatory stance by sweeping up 33 mobile apps.
Botnet discovered by Chinese researchers introduced a backdoor and a web shell on compromised AT&T VoIP servers, mostly in the US, for DDoS attacks and data exfiltration.
Researchers at Shanghai University used the D-Wave quantum computer to demonstrate decryption of a working RSA public key. The incident does demonstrate that the timeline to crack encryption that is not quantum-resistant, something that many feel is still at least 10 years off, may be shorter than expected.
Pinduoduo, a popular Chinese shopping app has been suspended from the Google Play Store after traces of malware were found in the code of previous app versions. Suspected purpose was to pore through user data and find information related to competing shopping apps.
Chinese spies known as Buckeye group are alleged to be using some of the NSA cyber weapons as early as March 2016, long before Shadow Brokers released them in April 2017.
A Chinese startup leaked information of more than 214 million social media users obtained through data scraping, including private information not provided on social profiles.
