Chinese Hackers

[kyonides]

Symantec implicates Chinese APT10

in sweeping hacking campaign against Japanese firms

https://www.cyberscoop.com/apt10-china-j...-symantec/

A Chinese government-linked hacking group whose operatives have been indicted by the U.S. and sanctioned by the European Union is suspected in a year-long effort to steal sensitive data from numerous Japanese companies and their subsidiaries, security researchers said Tuesday.
The attackers, known as APT10 or Cicada, have been burrowing into the networks of companies in the automotive, pharmaceutical and engineering sectors, according to researchers from antivirus provider Symantec. They have sometimes lingered for months before trying to extract data and have targeted domain controllers, the servers that act as gatekeepers for organizations’ network traffic.
APT10, which U.S. officials have alleged operates on behalf of China’s civilian intelligence service, has for over a decade been a key prong in alleged Chinese espionage activity. The group has a well-documented history of targeting Japanese companies, including an alleged attempt to infiltrate Japanese media organizations in 2018.

They also mentioned the latest attacks indicate the resurgence of the APT10 / Cicada group. Back in 2018 US authorities had indicted several of their members but it seems that didn't stop them from hacking more companies around the world.