Call us now:
Cyber threats keep on evolving. The SolarWinds hack was probably the first significant use of the Software Supply Chain for a hack. This example demonstrates the real complexity of a hack by APT10 a Chinese state sponsored group. A group that has the funds and backing to invest in such a sophisticated vector. APT10 are manipulating an antivirus product to slice in their own DLLs, opening a back door.
When you read this document you cannot but realize the complexity and lengths hackers are going to infect targets. Targets we know are vulnerable and in this case focusing on targets in, Japan for the purpose of espionage. Japan is struggling to develop a local cybersecurity community, increasing its vulnerability.
This vector is a real concern and growing threat even for well informed security professionals.
‘Kaspersky says LODEINFO v0.6.6 and v0.6.7, which weren’t analyzed in this report, are already distributed via new TTPs, so the threat is constantly changing form, making it very hard for analysts and defenders to keep up.’
Ted Dziekanowski
#cybersecurity #cyberiskmanagement #theaugustagroup
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6994206900288430080