* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Sunday, June 8, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    Cisco Partners with Monumental Sports & Entertainment to Power New D.C. Arena – Cisco Newsroom

    Cisco Teams Up with Monumental Sports & Entertainment to Revolutionize the New D.C. Arena Experience

    Middle Eastern Entertainment Headlines at 5:49 a.m. GMT – Yahoo

    Exciting Updates from the Middle Eastern Entertainment Scene!

    Ceramic Dalmatian Entertainment is WLAF’s Business of the Week – WLAF

    Spotlight on Success: Ceramic Dalmatian Entertainment Shines as This Week’s Featured Business!

    Brass Lion Entertainment unveils co-op action RPG Wu-Tang: Rise of the Deceiver – VentureBeat

    Unleash Your Inner Warrior: Discover the Co-Op Action RPG Wu-Tang: Rise of the Deceiver!

    Entertainment lineup released for 2025 Mississippi State Fair – WAPT

    Exciting Entertainment Lineup Unveiled for the 2025 Mississippi State Fair!

    After Denzel Washington Said He Would Be In Black Panther 3, Ryan Coogler Explained Why He’s ‘Fine’ With That Information Being Revealed So Early – Yahoo

    Ryan Coogler Shares Why He’s Cool with Denzel Washington’s Black Panther 3 Reveal!

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Reeves to Announce £86 Billion for Science and Technology in Spending Review – Bloomberg

    Reeves Set to Unveil Groundbreaking £86 Billion Investment in Science and Technology!

    Innovation at Scale: How P&G Transforms Business Through Technology – Procter & Gamble

    Revolutionizing Business: P&G’s Bold Journey into Technological Innovation

    Drag racer survives frightening airborne crash at World Wide Technology Raceway – FOX 2

    Drag racer survives frightening airborne crash at World Wide Technology Raceway – FOX 2

    Apple Watch and the future of wearable technology in healthcare – MSN

    Revolutionizing Healthcare: The Future of Wearable Technology with Apple Watch

    ECS Professor Pankaj K. Jha Receives NSF Grant to Develop Quantum Technology – Syracuse University News

    Unlocking the Future: ECS Professor Pankaj K. Jha Secures NSF Grant for Groundbreaking Quantum Technology Development

    Fire Tech Brief: 5 Fire Apparatus Technology Upgrades – firehouse.com

    Revving Up Safety: 5 Innovative Upgrades for Fire Apparatus Technology

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    Cisco Partners with Monumental Sports & Entertainment to Power New D.C. Arena – Cisco Newsroom

    Cisco Teams Up with Monumental Sports & Entertainment to Revolutionize the New D.C. Arena Experience

    Middle Eastern Entertainment Headlines at 5:49 a.m. GMT – Yahoo

    Exciting Updates from the Middle Eastern Entertainment Scene!

    Ceramic Dalmatian Entertainment is WLAF’s Business of the Week – WLAF

    Spotlight on Success: Ceramic Dalmatian Entertainment Shines as This Week’s Featured Business!

    Brass Lion Entertainment unveils co-op action RPG Wu-Tang: Rise of the Deceiver – VentureBeat

    Unleash Your Inner Warrior: Discover the Co-Op Action RPG Wu-Tang: Rise of the Deceiver!

    Entertainment lineup released for 2025 Mississippi State Fair – WAPT

    Exciting Entertainment Lineup Unveiled for the 2025 Mississippi State Fair!

    After Denzel Washington Said He Would Be In Black Panther 3, Ryan Coogler Explained Why He’s ‘Fine’ With That Information Being Revealed So Early – Yahoo

    Ryan Coogler Shares Why He’s Cool with Denzel Washington’s Black Panther 3 Reveal!

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Reeves to Announce £86 Billion for Science and Technology in Spending Review – Bloomberg

    Reeves Set to Unveil Groundbreaking £86 Billion Investment in Science and Technology!

    Innovation at Scale: How P&G Transforms Business Through Technology – Procter & Gamble

    Revolutionizing Business: P&G’s Bold Journey into Technological Innovation

    Drag racer survives frightening airborne crash at World Wide Technology Raceway – FOX 2

    Drag racer survives frightening airborne crash at World Wide Technology Raceway – FOX 2

    Apple Watch and the future of wearable technology in healthcare – MSN

    Revolutionizing Healthcare: The Future of Wearable Technology with Apple Watch

    ECS Professor Pankaj K. Jha Receives NSF Grant to Develop Quantum Technology – Syracuse University News

    Unlocking the Future: ECS Professor Pankaj K. Jha Secures NSF Grant for Groundbreaking Quantum Technology Development

    Fire Tech Brief: 5 Fire Apparatus Technology Upgrades – firehouse.com

    Revving Up Safety: 5 Innovative Upgrades for Fire Apparatus Technology

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

China’s APT40 gang is ready to attack vulns within hours or days of public release

July 9, 2024
in Technology
China’s APT40 gang is ready to attack vulns within hours or days of public release
Share on FacebookShare on Twitter

Law enforcement agencies from eight nations, led by Australia, have issued an advisory that details the tradecraft used by China-aligned threat actor APT40 – aka Kryptonite Panda, GINGHAM TYPHOON, Leviathan and Bronze Mohawk – and found it prioritizes developing exploits for newly found vulnerabilities and can target them within hours.

The advisory describes APT40 as a “state-sponsored cyber group” and the People’s Republic of China (PRC) as that sponsor. The agencies that authored the advisory – which come from Australia, the US, Canada, New Zealand, Japan, South Korea, the UK, and Germany – believe APT40 “conducts malicious cyber operations for the PRC Ministry of State Security (MSS).”

Development of the advisory was led by Australia, because the Cyber Security Centre (ACSC) at the nation’s Signals Directorate was made aware in 2022 of an APT40 attack on an unidentified local organization.

The ACSC secured the victim org’s permission and “deployed host-based sensors to likely affected hosts on the organization’s network.” Info that flowed from those sensors allowed ACSC incident response analysts to map APT40 activities.

The advisory is the result, and suggests that APT40 “possesses the capability to rapidly transform and adapt exploit proof-of-concept(s) (POCs) of new vulnerabilities and immediately utilize them against target networks possessing the infrastructure of the associated vulnerability.” The gang also watches networks of interest to look for unpatched targets.

China-linked APT40 gang targets wind farms, Australian government

Oh no Xi didn’t?! China’s hackers nick naval tech blueprints, diddle with foreign elections to boost trade – new claim

New Zealand to world: China attacked us, too!

Paying for WinRAR in all the wrong ways – Russia and China hitting ancient app

“This regular reconnaissance postures the group to identify vulnerable, end-of-life or no longer maintained devices on networks of interest, and to rapidly deploy exploits,” the advisory warns.

Those efforts yield results, because some systems have not been patched for problems identified as long ago as 2017. Some of the vulns APT40 targets are old news – Log4J (CVE 2021 44228), Atlassian Confluence (CVE-2021-31207, CVE-2021- 26084). and Microsoft Exchange (CVE-2021-31207, CVE 2021-34523, CVE-2021-34473) are high on the hit list.

To target its victims, APT40 appears to go looking for a device at an unrelated entity, to use as a launching point. In the case of the attack observed by the ACSC, that device was probably located at a small business or home. That device probes a target using tactics that make the attack appear to be part of legitimate traffic.

“APT40 has embraced the global trend of using compromised devices, including small-office/home-office (SOHO) devices, as operational infrastructure and last-hop redirectors for its operations in Australia,” the advisory observes. “Many of these SOHO devices are end-of-life or unpatched and offer a soft target for N-day exploitation.”

Popping SOHO boxes has, however, “enabled the authoring agencies to better characterize and track this group’s movements.”

And those movements see the group use web shells and search for valid user credentials that allow it to achieve persistent access.

Malware is eventually installed, with exfiltration of info the aim.

The advisory outlines mitigation tactics that are said to offer decent defences against APT40. They’re not rocket science: logging, patch management, and network segmentation are all listed.

So are multifactor authentication, disabling unused network services, use of web application firewalls, least privilege access, and replacement of end-of-life equipment.

The advisory also lists and links to ten samples of malware deployed by APT4, and includes two case studies. The latter documents are, however, now old enough that the victims’ IT estates have been remediated – APT40 may well have moved on to other tactics since. ®

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : The Register – https://go.theregister.com/feed/www.theregister.com/2024/07/09/apt_40_tradecraft_advisory/

Tags: China’sReadytechnology
Previous Post

EXPLAINED: Why Indians Are Unhappy With Rohit Sharma’s New Profile Pic?

Next Post

Founder of Indian ride-share biz Ola calls for 70-hour work week

Cisco Partners with Monumental Sports & Entertainment to Power New D.C. Arena – Cisco Newsroom

Cisco Teams Up with Monumental Sports & Entertainment to Revolutionize the New D.C. Arena Experience

June 8, 2025
Couples who cuddle before sleep reap key health benefits, study reveals – Fox News

Couples who cuddle before sleep reap key health benefits, study reveals – Fox News

June 8, 2025
‘Damnit, get somebody in there’: Jimmy Patronis presses Ron DeSantis on CFO vacancy – Florida Politics

Damnit, Get Somebody In There!’ Jimmy Patronis Urges Ron DeSantis to Fill CFO Vacancy Immediately

June 8, 2025
Reeves to Announce £86 Billion for Science and Technology in Spending Review – Bloomberg

Reeves Set to Unveil Groundbreaking £86 Billion Investment in Science and Technology!

June 8, 2025
Shotgun sequencing of airborne eDNA achieves rapid assessment of whole biomes, population genetics and genomic variation – Nature

Revolutionizing Biodiversity: Rapid Insights into Ecosystems and Genetic Diversity Through Shotgun Sequencing of Airborne eDNA

June 8, 2025
Earth’s energy balance is rising much faster than scientists predicted, and we have no idea why – Live Science

Unraveling the Mystery: Earth’s Energy Balance is Surging Faster Than Expected!

June 8, 2025
The Undermining of Science — and Society — Continues – UExpress

How the Erosion of Science is Impacting Our Society

June 8, 2025
10 habits that secretly ‘kill’ your happy hormones – Times of India

10 Surprising Habits That Sabotage Your Happy Hormones

June 8, 2025
A GPS Blackout Would Shut Down the World – WIRED

How a GPS Blackout Could Bring the World to a Standstill

June 8, 2025
Six Steps To Ruin a Country’s Image, Economy, and Global Standing | Opinion – Newsweek

Six Surefire Ways to Dismantle a Nation’s Reputation and Prosperity

June 8, 2025

Categories

Archives

June 2025
MTWTFSS
 1
2345678
9101112131415
16171819202122
23242526272829
30 
« May    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (677)
  • Economy (690)
  • Entertainment (21,597)
  • General (15,274)
  • Health (9,733)
  • Lifestyle (694)
  • News (22,149)
  • People (691)
  • Politics (698)
  • Science (15,909)
  • Sports (21,193)
  • Technology (15,677)
  • World (675)

Recent News

Cisco Partners with Monumental Sports & Entertainment to Power New D.C. Arena – Cisco Newsroom

Cisco Teams Up with Monumental Sports & Entertainment to Revolutionize the New D.C. Arena Experience

June 8, 2025
Couples who cuddle before sleep reap key health benefits, study reveals – Fox News

Couples who cuddle before sleep reap key health benefits, study reveals – Fox News

June 8, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version