Security News > 2021 > March > Malware attack that crippled Mumbai's power system came from China, claims infosec intel outfit Recorded Future
Security intelligence firm Recorded Future's Insikt Group has written a paper alleging China was behind attacks on India's electricity grid.
The attack is considered the probable source of Mumbai's power outage in October of the same year.
"Using a combination of proactive adversary infrastructure detections, domain analysis, and Recorded Future Network Traffic Analysis, we have determined that a subset of these AXIOMATICASYMPTOTE servers share some common infrastructure tactics, techniques, and procedures with several previously reported Chinese state-sponsored groups, including APT41 and Tonto Team," the Recorded Future report said.
The firm said most of the malware was not activated and the associated power outage was the result of a subset of the payload. Recorded Future did not have access to India's power system code to analyse in further detail.
Recorded Future hypothesised that last year's power outages in Mumbai, which caused mass chaos in the city's infrastructure - ranging from trains to hospitals to financial centre operations - were a "Show of force" designed to warn India of China's capabilities.
Union power minister RK Singh did concede that a software nasty got into India's northern and southern region load dispatch centers, though the impact was limited, we're told.
News URL
Related news
- Infosec experts fear China could retaliate against tariffs with a Typhoon attack (source)
- China-based Silver Fox spoofs healthcare app to deliver malware (source)
- Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations (source)
- China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access (source)
- Feds name and charge alleged Silk Typhoon spies behind years of China-on-US attacks (source)
- China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families (source)
- ⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More (source)
- Chinese FamousSparrow hackers deploy upgraded malware in attacks (source)
- Open-source malware doubles, data exfiltration attacks dominate (source)
- Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware (source)