Page 2 - Spyder Loader News Today

Researchers at Symantec have uncovered cyberattacks attributed to the China-linked espionage actor APT41 (a.k.a. Winnti) that breached government agencies in Hong Kong and remained undetected for a year in some cases.

The state-sponsored threat actor has switched up its tactics, also adding an automated SQL-injection tool to its bag of tricks for initial access.

This service relies on search engine optimization (SEO) poisoning as well as laced software downloads uploaded onto torrent sites and has a history of distributing a wide array of malware.

A global cyber espionage campaign dubbed OperationCuckooBees has been uncovered, targeting manufacturers across North America, Europe and Asia in the Defense, Energy, Aerospace, Biotech and Pharma industries.

Operation CuckooBees uncovered the state-sponsored group's sophisticated new tactics in a years-long campaign that hit more than 30 tech and manufacturing companies.

Chinese state-sponsored threat actor Winnti has reportedly been stealing proprietary data for years.

Boston, MA (PRWEB) May 04, 2022 -- Cybereason, the XDR company, today published new research on Operation CuckooBees, a 12 month investigation into Winnti

Winnti conducted a prolonged cyber espionage campaign that went undetected for years, allowing it to exfiltrate massive amounts of corporate data and intellectual property.

The Operation CuckooBees campaign used zero-day exploits to compromise networks and leveraged Windows' Common Log File System to avoid detection.