Chinese Hackers

[kyonides]

Chinese APT40 Attacked Taiwanese Government Agencies

https://www.cyberscoop.com/taiwan-china-hacking-apt40/
They had attacked 10 agencies and 6,000 email accounts of officials in an escalation of Beijing’s long-running espionage on the island, says CyberScoop.

Over the course of two years, Chinese hackers have infiltrated a variety of Taiwanese government offices in an effort to steal sensitive documents

Let's take a look at their targets.

The Taiwanese semiconductor industry, a centerpiece of the global supply chain for smartphones, has also come under sustained assault from hackers that appear to be based in China, private researchers said earlier this month.

Taiwanese authorities also feel they need to keep an eye on Hong Kongers that have been arriving as of late since China passed its law criminalizing protests.

Here's how they did it. Hackers exploited VPN software, some sort of secure tunnel to a private network, to break into networks, and then smuggled the stolen data out using their own encrypted connections. Part of their malware is called Taidoor and US authorities had denounced Chinese hackers have been using it for over 12 years.

Security firm Firefly stated they have been active in multiple Southeast Asian countries in support of China’s “Belt and Road” infrastructure development strategy. Just in case you don't recall what that term means, we're talking about the modern Silk Road here.

CyberScoop also revealed that the American Institute in Taiwan is helping them find ways to detect their network flaws.