Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents
A "major cybersecurity incident" that gave suspected Chinese threat actors remote access to some systems and unclassified information was reported by the US Treasury Department.
In a letter to the Senate Committee on Banking, Housing, and Urban Affairs, Treasury said that it had received notification from BeyondTrust, a third-party software service provider, on December 8, 2024, that a threat actor had obtained a key that the vendor used to secure a cloud-based service that provided remote technical support for Treasury Departmental Offices (DO) end users.
The threat actor was able to remotely access some Treasury DO user workstations, circumvent the security of the service, and access some of the users' unclassified documents by using the stolen key read more about Chinese APT Expl...