Security News > 2020 > March > CIA Hackers Targeted China in Decade-Long Campaign: Chinese Security Firm
The Chinese company claims it's aware of attacks launched by the CIA between September 2008 and June 2019.
"In the CIA's attack against Chinese aviation organizations and scientific research institutions, we found that attackers mainly targeted system developers in these sectors to carry out the campaigns," Qihoo said in an English-language blog post.
The company added, "We speculate that in the past eleven years of infiltration attacks, CIA may have already grasped the most classified business information of China, even of many other countries in the world. It does not even rule out the possibility that now CIA is able to track down the real-time global flight status, passenger information, trade freight and other related information. If the guess is true, what unexpected things will CIA do if it has such confidential and important information? Get important figures' travel itinerary, and then pose political threats, or military suppression?".
The threat actor linked by Qihoo to the CIA - the company tracks it as APT-C-39 - reportedly used many of the tools contained in the Vault 7 leaks in its attacks, even before they were made public.
The company said some of the "Attack weapons" used by APT-C-39 are associated with the U.S. National Security Agency, which reportedly assisted the CIA in developing cyber weapons.
News URL
Related news
- Trump 'waved a white flag to Chinese hackers' as Homeland Security axed cyber advisory boards (source)
- U.S. org suffered four month intrusion by Chinese hackers (source)
- Chinese hackers use Visual Studio Code tunnels for remote access (source)
- U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls (source)
- Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection (source)
- White House links ninth telecom breach to Chinese hackers (source)
- More telcos confirm China Salt Typhoon security breaches as White House weighs in (source)
- Chinese hackers targeted sanctions office in Treasury attack (source)
- US sanctions Chinese company linked to Flax Typhoon hackers (source)
- Chinese hackers also breached Charter and Windstream networks (source)