Chinese hackers spent 18 months inside Microsoft 365 before anyone noticed

https://www.martincid.com/technology-sv/chinese-hackers-microsoft-365-18-months-2/

#CloudSecurity #Cybersecurity #Unc5221

Chinese #APT deploys new #malware to keep access to hacked networks

https://www.bleepingcomputer.com/news/security/chinese-apt-deploys-new-malware-to-keep-access-to-hacked-networks/

#China #cybersecurity #UNC5221 #Brickstorm #Planet #AgentPSD #VerdantBamboo

UNC5221, a Chinese APT, isn't relying on one backdoor. They're building an "access portfolio" with new malware like Brickstorm and Plenet, exploiting zero-days and edge devices to maintain persistent access for over 18 months. This multi-malware strategy allows re-breaches, turning incident response into a resource drain. Discover their tactics and the real impact.

https://www.tpp.blog/r27bx1d

#cybersecurity #unc5221 #brickstorm

🤖 This post was AI-generated.

Chinese APT Exploits New Malware to Prolong Network Access

A Chinese-linked espionage group, tracked as UNC5221 or VerdantBamboo, exploited new malware to secretly maintain access to US networks for over 18 months, evading detection by blending in with legitimate traffic. The attackers used a sophisticated backdoor called Brickstorm to prolong their stay undetected.

https://osintsights.com/chinese-apt-exploits-new-malware-to-prolong-network-access?utm_source=mastodon&utm_medium=social

#ChineseApt #MalwareOperations #NationState #Unc5221 #Verdantbamboo

Google China-linked hackers (#UNC5221) are targeting US SaaS and tech firms using the new BRICKSTORM malware, exploiting zero-day flaws, Mandiant has found.

Read: https://hackread.com/china-hackers-hit-us-tech-firms-brickstorm-malware/

#CyberSecurity #BRICKSTORM #0Day #InfoSec #APT #CyberAttack