* . *
  • About
  • Advertise
  • Privacy & Policy
  • Contact
Wednesday, July 9, 2025
Earth-News
  • Home
  • Business
  • Entertainment
    Moses Singer Welcomes Entertainment and Intellectual Property Partner Frederick Bimbler – Yahoo Finance

    Moses Singer Expands Team with New Entertainment and Intellectual Property Partner Frederick Bimbler

    Longhua District and Max-Matching Entertainments, supported by RWS Global forge strategic partnership to develop international IP-themed entertainment complex – Amusement Today

    Longhua District and Max-Matching Entertainments, supported by RWS Global forge strategic partnership to develop international IP-themed entertainment complex – Amusement Today

    Government whip to withdraw Entertainment Complex Bill on July 9 – Nation Thailand

    Government whip to withdraw Entertainment Complex Bill on July 9 – Nation Thailand

    Magicians and Battlebots light up Las Vegas entertainment scene – KSNV

    Magicians and Battlebots Take Las Vegas Entertainment by Storm

    Max-Matching Entertainments & Longhua District form partnership for new entertainment complex – Blooloop

    Max-Matching Entertainments and Longhua District Unite to Launch Thrilling New Entertainment Complex

    Kennedy Publishing, MGA Entertainment Launch Yummiland Magazine – License Global

    Kennedy Publishing, MGA Entertainment Launch Yummiland Magazine – License Global

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Kaseya Extends Community Investment with Addition of Technology Marketing Toolkit – Kaseya

    Kaseya Extends Community Investment with Addition of Technology Marketing Toolkit – Kaseya

    AI and the Trust Revolution: How Technology Is Transforming Human Connections – Foreign Affairs

    AI and the Trust Revolution: How Technology Is Transforming Human Connections – Foreign Affairs

    Technology And Construction Names Join Top Stock Lists: Check Out Additions To IBD 50, Big Cap 20 And More – Investor’s Business Daily

    Technology and Construction Leaders Surge Into Top Stock Rankings: See the Latest Additions to IBD 50, Big Cap 20, and More

    Column: Teach kupuna new technology skills – Honolulu Star-Advertiser

    Empowering Kupuna: Unlocking New Technology Skills for a Connected Future

    EIFO invests $5 million in D3, the Ukraine-focused defence technology venture fund – sUAS News

    EIFO Pledges $5 Million to Supercharge Ukraine-Focused Defense Technology Fund

    New Technology for Water Efficiency and Working with Mexico on Screwworm – AG INFORMATION NETWORK OF THE WEST

    Revolutionary Water Efficiency Technology and Cross-Border Collaboration to Defeat Screwworm

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
  • Home
  • Business
  • Entertainment
    Moses Singer Welcomes Entertainment and Intellectual Property Partner Frederick Bimbler – Yahoo Finance

    Moses Singer Expands Team with New Entertainment and Intellectual Property Partner Frederick Bimbler

    Longhua District and Max-Matching Entertainments, supported by RWS Global forge strategic partnership to develop international IP-themed entertainment complex – Amusement Today

    Longhua District and Max-Matching Entertainments, supported by RWS Global forge strategic partnership to develop international IP-themed entertainment complex – Amusement Today

    Government whip to withdraw Entertainment Complex Bill on July 9 – Nation Thailand

    Government whip to withdraw Entertainment Complex Bill on July 9 – Nation Thailand

    Magicians and Battlebots light up Las Vegas entertainment scene – KSNV

    Magicians and Battlebots Take Las Vegas Entertainment by Storm

    Max-Matching Entertainments & Longhua District form partnership for new entertainment complex – Blooloop

    Max-Matching Entertainments and Longhua District Unite to Launch Thrilling New Entertainment Complex

    Kennedy Publishing, MGA Entertainment Launch Yummiland Magazine – License Global

    Kennedy Publishing, MGA Entertainment Launch Yummiland Magazine – License Global

  • General
  • Health
  • News

    Cracking the Code: Why China’s Economic Challenges Aren’t Shaking Markets, Unlike America’s” – Bloomberg

    Trump’s Narrow Window to Spread the Truth About Harris

    Trump’s Narrow Window to Spread the Truth About Harris

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    Israel-Gaza war live updates: Hamas leader Ismail Haniyeh assassinated in Iran, group says

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    PAP Boss to Niger Delta Youths, Stay Away from the Protest

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Court Restricts Protests In Lagos To Freedom, Peace Park

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Fans React to Jazz Jennings’ Inspiring Weight Loss Journey

    Trending Tags

    • Trump Inauguration
    • United Stated
    • White House
    • Market Stories
    • Election Results
  • Science
  • Sports
  • Technology
    Kaseya Extends Community Investment with Addition of Technology Marketing Toolkit – Kaseya

    Kaseya Extends Community Investment with Addition of Technology Marketing Toolkit – Kaseya

    AI and the Trust Revolution: How Technology Is Transforming Human Connections – Foreign Affairs

    AI and the Trust Revolution: How Technology Is Transforming Human Connections – Foreign Affairs

    Technology And Construction Names Join Top Stock Lists: Check Out Additions To IBD 50, Big Cap 20 And More – Investor’s Business Daily

    Technology and Construction Leaders Surge Into Top Stock Rankings: See the Latest Additions to IBD 50, Big Cap 20, and More

    Column: Teach kupuna new technology skills – Honolulu Star-Advertiser

    Empowering Kupuna: Unlocking New Technology Skills for a Connected Future

    EIFO invests $5 million in D3, the Ukraine-focused defence technology venture fund – sUAS News

    EIFO Pledges $5 Million to Supercharge Ukraine-Focused Defense Technology Fund

    New Technology for Water Efficiency and Working with Mexico on Screwworm – AG INFORMATION NETWORK OF THE WEST

    Revolutionary Water Efficiency Technology and Cross-Border Collaboration to Defeat Screwworm

    Trending Tags

    • Nintendo Switch
    • CES 2017
    • Playstation 4 Pro
    • Mark Zuckerberg
No Result
View All Result
Earth-News
No Result
View All Result
Home Technology

China’s APT40 gang is ready to attack vulns within hours or days of public release

July 9, 2024
in Technology
China’s APT40 gang is ready to attack vulns within hours or days of public release
Share on FacebookShare on Twitter

Law enforcement agencies from eight nations, led by Australia, have issued an advisory that details the tradecraft used by China-aligned threat actor APT40 – aka Kryptonite Panda, GINGHAM TYPHOON, Leviathan and Bronze Mohawk – and found it prioritizes developing exploits for newly found vulnerabilities and can target them within hours.

The advisory describes APT40 as a “state-sponsored cyber group” and the People’s Republic of China (PRC) as that sponsor. The agencies that authored the advisory – which come from Australia, the US, Canada, New Zealand, Japan, South Korea, the UK, and Germany – believe APT40 “conducts malicious cyber operations for the PRC Ministry of State Security (MSS).”

Development of the advisory was led by Australia, because the Cyber Security Centre (ACSC) at the nation’s Signals Directorate was made aware in 2022 of an APT40 attack on an unidentified local organization.

The ACSC secured the victim org’s permission and “deployed host-based sensors to likely affected hosts on the organization’s network.” Info that flowed from those sensors allowed ACSC incident response analysts to map APT40 activities.

The advisory is the result, and suggests that APT40 “possesses the capability to rapidly transform and adapt exploit proof-of-concept(s) (POCs) of new vulnerabilities and immediately utilize them against target networks possessing the infrastructure of the associated vulnerability.” The gang also watches networks of interest to look for unpatched targets.

China-linked APT40 gang targets wind farms, Australian government

Oh no Xi didn’t?! China’s hackers nick naval tech blueprints, diddle with foreign elections to boost trade – new claim

New Zealand to world: China attacked us, too!

Paying for WinRAR in all the wrong ways – Russia and China hitting ancient app

“This regular reconnaissance postures the group to identify vulnerable, end-of-life or no longer maintained devices on networks of interest, and to rapidly deploy exploits,” the advisory warns.

Those efforts yield results, because some systems have not been patched for problems identified as long ago as 2017. Some of the vulns APT40 targets are old news – Log4J (CVE 2021 44228), Atlassian Confluence (CVE-2021-31207, CVE-2021- 26084). and Microsoft Exchange (CVE-2021-31207, CVE 2021-34523, CVE-2021-34473) are high on the hit list.

To target its victims, APT40 appears to go looking for a device at an unrelated entity, to use as a launching point. In the case of the attack observed by the ACSC, that device was probably located at a small business or home. That device probes a target using tactics that make the attack appear to be part of legitimate traffic.

“APT40 has embraced the global trend of using compromised devices, including small-office/home-office (SOHO) devices, as operational infrastructure and last-hop redirectors for its operations in Australia,” the advisory observes. “Many of these SOHO devices are end-of-life or unpatched and offer a soft target for N-day exploitation.”

Popping SOHO boxes has, however, “enabled the authoring agencies to better characterize and track this group’s movements.”

And those movements see the group use web shells and search for valid user credentials that allow it to achieve persistent access.

Malware is eventually installed, with exfiltration of info the aim.

The advisory outlines mitigation tactics that are said to offer decent defences against APT40. They’re not rocket science: logging, patch management, and network segmentation are all listed.

So are multifactor authentication, disabling unused network services, use of web application firewalls, least privilege access, and replacement of end-of-life equipment.

The advisory also lists and links to ten samples of malware deployed by APT4, and includes two case studies. The latter documents are, however, now old enough that the victims’ IT estates have been remediated – APT40 may well have moved on to other tactics since. ®

>>> Read full article>>>
Copyright for syndicated content belongs to the linked Source : The Register – https://go.theregister.com/feed/www.theregister.com/2024/07/09/apt_40_tradecraft_advisory/

Tags: China’sReadytechnology
Previous Post

EXPLAINED: Why Indians Are Unhappy With Rohit Sharma’s New Profile Pic?

Next Post

Founder of Indian ride-share biz Ola calls for 70-hour work week

Musk says he is forming new political party after fallout with Trump – CNN

Musk says he is forming new political party after fallout with Trump – CNN

July 9, 2025
Kaseya Extends Community Investment with Addition of Technology Marketing Toolkit – Kaseya

Kaseya Extends Community Investment with Addition of Technology Marketing Toolkit – Kaseya

July 9, 2025
Racketeering charges likely in death of sports reporter Adan Manzano – fox8live.com

Racketeering charges likely in death of sports reporter Adan Manzano – fox8live.com

July 9, 2025
A Research Framework for Water Health Clinical Diagnosis System in China | Newswise – Newswise

Revolutionary Research Framework Transforms Water Health Clinical Diagnosis in China

July 8, 2025
I Spent $88.03 at American Science and Surplus – Milwaukee Magazine

I Spent $88.03 at American Science and Surplus – Milwaukee Magazine

July 8, 2025
Scientists burned, poked and sliced their way through new robotic skin that can ‘feel everything’ – Live Science

Scientists Test Revolutionary Robotic Skin That Can ‘Feel Everything’ Through Burning, Poking, and Slicing

July 8, 2025
Study of Environment, Lifestyle and Fibroids (SELF) – National Institute of Environmental Health Sciences (.gov)

Study of Environment, Lifestyle and Fibroids (SELF) – National Institute of Environmental Health Sciences (.gov)

July 8, 2025
Fluminense vs Chelsea LIVE on DAZN: Semi-final underway in New Jersey – dazn.com

Fluminense vs Chelsea LIVE on DAZN: Semi-final underway in New Jersey – dazn.com

July 8, 2025
Supply chain careers delivering high pay, purpose in a shifting economy – Supply Chain Management Review

Supply chain careers delivering high pay, purpose in a shifting economy – Supply Chain Management Review

July 8, 2025
Moses Singer Welcomes Entertainment and Intellectual Property Partner Frederick Bimbler – Yahoo Finance

Moses Singer Expands Team with New Entertainment and Intellectual Property Partner Frederick Bimbler

July 8, 2025

Categories

Archives

July 2025
MTWTFSS
 123456
78910111213
14151617181920
21222324252627
28293031 
« Jun    
Earth-News.info

The Earth News is an independent English-language daily published Website from all around the World News

Browse by Category

  • Business (20,132)
  • Ecology (711)
  • Economy (736)
  • Entertainment (21,624)
  • General (15,785)
  • Health (9,773)
  • Lifestyle (741)
  • News (22,149)
  • People (736)
  • Politics (745)
  • Science (15,953)
  • Sports (21,235)
  • Technology (15,720)
  • World (717)

Recent News

Musk says he is forming new political party after fallout with Trump – CNN

Musk says he is forming new political party after fallout with Trump – CNN

July 9, 2025
Kaseya Extends Community Investment with Addition of Technology Marketing Toolkit – Kaseya

Kaseya Extends Community Investment with Addition of Technology Marketing Toolkit – Kaseya

July 9, 2025
  • About
  • Advertise
  • Privacy & Policy
  • Contact

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

No Result
View All Result

© 2023 earth-news.info

Go to mobile version