Typhoon-adjacent Chinese crew broke into Taiwanese web host

Threat Score:
76
The Register Security
4 hours ago
Typhoon-adjacent Chinese crew broke into Taiwanese web host

Overview

Cyber-crime Typhoon-adjacent Chinese crew broke into Taiwanese web host Is that a JuicyPotato on your network? A suspected Chinese-government-backed cyber crew recently broke into a Taiwanese web hosting provider to steal credentials and plant backdoors for long-term access, using a mix of open-source and custom software tools, Cisco Talos reports. Talos tracks the Chinese-speaking advanced persistent threat (APT) group as UAT-7237 and says that it has been active since at least 2022. The securi...

Related Articles

5 articles
1

New Crypto24 Ransomware Attacks Bypass EDR

Dark Reading • 7 hours ago

While several cybercrime groups have embraced "EDR killers," researchers say the deep knowledge and technical skills demonstrated by Crypto24 signify a dangerous escalation.

Score
88
Read more
4

Ransomware Actors Blending Legitimate Tools with Custom Malware to Evade Detection

Cybersecurity News • 5 hours ago

The cybersecurity landscape faces a new sophisticated threat as the Crypto24 ransomware group demonstrates an alarming evolution in attack methodology, seamlessly blending legitimate administrative tools with custom-developed malware to execute precision strikes against high-value targets. This emerging ransomware operation has successfully compromised organizations across Asia, Europe, and the United States, with a particular focus on […]

Score
79
Read more