Security News > 2022 > May > China-linked APT Caught Pilfering Treasure Trove of IP

The researchers attributed the campaign, with "Moderate-to-high confidence," to the Winnti group.

Winnti is "An exceptionally capable adversary" that is "Believed to be operating on behalf of Chinese state interests and specializes in cyberespionage and intellectual property theft."

What distinguished Winnti's attacks was in the details.

Winnti primarily went after American, European, and Asian technology companies and manufacturers.

To avoid further Winnti attacks in years to come, targeted organizations will need to update all those employee credentials, adjust that architecture, and root out any potential backdoors.

Winnti is one of the oldest APTs still in business, with malicious campaigns dating back a dozen years already.

News URL

https://threatpost.com/china-linked-apt-caught-pilfering-treasure-trove-of-ip/179503/