[ad_1]
The campaign’s success is a striking example of the dangerous software flaws that emerged years after they were discovered and made public. Zero-day attacks— hackers exploiting previously unknown vulnerabilities — throw a punch and demand attention. However, known flaws remain strong, as it can be difficult to update and secure networks and devices with limited resources, personnel, and money.
Rob Joyce, a senior National Security Agency official, explained that the advice is aimed at providing step-by-step instructions on finding and repelling hackers. “kicking [the Chinese hackers] “We need to understand the commercial craft and detect them beyond just initial access.” tweeted out.
Joyce reiterated the recommendation that urged telecom companies to implement core cybersecurity practices, such as keeping critical systems up to date, enabling multi-factor authentication, and reducing the exposure of internal networks to the Internet.
Per the advice, Chinese espionage typically started when hackers used open-source scanning tools like RouterSploit and RouterScan to probe target networks and learn the make, model, version, and known vulnerabilities of routers and network devices.
With this knowledge, the hackers were able to exploit the old but unfixed vulnerabilities to gain access to the network and from there they were able to break into servers that provide authentication and authentication for target organizations. They stole usernames and passwords, reconfigured routers, and successfully leaked the targeted network’s traffic and copied it to their own machines. With these tactics, they were able to spy on almost everything that was going on inside organizations.
The hackers then scoured and deleted log files on every machine they touched to destroy evidence of the attack. US officials have not disclosed how they eventually learned of the hackers, despite attempts to cover the tracks of the attackers.
The Americans also neglected details of exactly which hacking groups they blamed, and evidence that the Chinese government was responsible.
This advice is another alarm the US has voiced about China. FBI Deputy Director Paul Abbate said in a recent speech that China “has carried out more cyberattacks than any other nation in the world combined.” The Chinese government routinely denies engaging in any hacking campaigns against other countries. The Chinese embassy in Washington DC did not respond to a request for comment.
[ad_2]
Source link
