Summary

Microsoft has identified a new Chinese state-sponsored hacking group, Storm-0227, targeting U.S. critical infrastructure and government entities.

The group uses spear phishing and exploits software vulnerabilities to deploy off-the-shelf malware to steal sensitive data and login credentials for espionage.

Storm-0227 shares similarities with other Chinese APT groups, including Silk Typhoon and Volt Typhoon, known for targeting sectors like military and telecommunications.

Experts emphasize China’s ongoing espionage against Western governments and industries, with Storm-0227 illustrating a growing trend of nation-state actors using readily available malware tools.

  • skuzz@discuss.tchncs.de
    link
    fedilink
    arrow-up
    5
    ·
    18 days ago

    Anything to distract people right now, it seems. Like any one individual can do anything about it. Carriers weren’t even transparent on their outages that were likely a result of trying to defend against this.