China's Winnti Group Seen Targeting Governments in Sri Lanka, Hong Kong
Over the past months, Chinese state-sponsored threat group Winnti has been observed targeting governmental entities in Sri Lanka and Hong Kong.
Stay updated with breaking news from Wicked Spider. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Over the past months, Chinese state-sponsored threat group Winnti has been observed targeting governmental entities in Sri Lanka and Hong Kong.
The group's attack methods have included exploits for a zero-day vulnerability in a livestock-tracking apps as well as for the Apache Log4 flaw.
MoonBounce firmware bootkit shows evident technical improvements over others, making it a more dangerous threat to organisations. It is being used by Chinese state-backed actors.
As advanced persistent threats go, the one uncovered by McAfee should serve as a wake-up call for IT security teams.
Airlines are warned to scour networks for traces of the campaign, likely the work of APT41, lurking in networks.