Live
- Rampant illegal sand mining plagues mandal despite seizure orders
- TDP Chief N Chandrababu Naidu condemns the killings of TDP activists Mulaiah in Giddalur and Imam Hussain in Nandyala
- Modi’s visit pumps up BJP cadres
- Congress, BJP struggle to finalise candidates
- Warangal’s share in nominated posts dips
- AAP govt failed to deliver on its poll promises, says Lekhi
- Modi lauds Punjab’s 15-year-old badminton player Tanvi Sharma
- Jana Sena stages protest for Vijayawada West ticket
- Ex-Raj Minister Joshi skips ED summons
- TDP Puttaparthi candidate Palle Sindhura Reddy assures of providing water to ponds
Just In
India targeted through cyber intrusions by RedFoxtrot linked to Chinese military
Active since 2014, RedFoxtrot predominantly targets aerospace and defense, government, telecommunications, mining, and research organizations in India among other countries
New Delhi: Active since 2014, RedFoxtrot predominantly targets aerospace and defense, government, telecommunications, mining, and research organizations in India among other countries.
The other countries are Afghanistan, Kazakhstan, Kyrgyzstan, Pakistan, Tajikistan, and Uzbekistan, aligning with the operational remit of PLA Unit 69010.
Recorded Future, the world's largest provider of intelligence for enterprise security, on Thursday, revealed cyber espionage activity attributed to a suspected Chinese state-sponsored threat activity group, named RedFoxtrot by Recorded Future's threat research arm Insikt Group.
Insikt Group identified specific ties between RedFoxtrot's activity and the Chinese military intelligence apparatus, the People's Liberation Army (PLA) Unit 69010 within the Strategic Support Force (SSF), offering a rare glimpse into SSF operations since the PLA's restructuring in 2015.
Recorded Future's large-scale, automated network traffic analytics and expert analysis detected intrusions targeting sectors across bordering Asian countries.
Active since 2014, RedFoxtrot predominantly targets aerospace and defense, government, telecommunications, mining, and research organizations in Afghanistan, India, Kazakhstan, Kyrgyzstan, Pakistan, Tajikistan, and Uzbekistan, aligning with the operational remit of PLA Unit 69010.
RedFoxtrot maintains large amounts of operational infrastructure and has employed both bespoke and publicly available malware families commonly used by Chinese cyberespionage groups.
RedFoxtrot activity overlaps with threat groups tracked by other security vendors such as Temp.Trident and Nomad Panda.
It is assessed with high confidence that RedFoxtrot is a Chinese state-sponsored threat activity group based on identified links to a specific PLA unit and the use of shared custom capabilities considered unique to Chinese cyber espionage groups.
"The recent activity of the People's Liberation Army has largely been a black box for the intelligence community. Being able to provide this rare end-to-end glimpse into PLA activity and Chinese military tactics and motivations provides invaluable insight into the global threat landscape. The persistent and pervasive monitoring and collection of intelligence is crucial in order to disrupt adversaries and inform an organization or government's security posture", said Christopher Ahlberg, CEO and Co-Founder, Recorded Future.
© 2024 Hyderabad Media House Limited/The Hans India. All rights reserved. Powered by hocalwire.com