Chinese hacking groups target Russian government and IT firms
Chinese hackers from the APT31 and APT 27 groups are suspected of being behind a string of targeted cyberattacks that began around the end of July 2024 and attacked dozens of systems utilized by Russian government agencies and IT enterprises.
The operation was called "EastWind" by Kaspersky, who also reported that it uses an upgraded version of the CloudSorcerer backdoor that was observed in a related cyberespionage campaign from May 2024 that also targeted Russian government institutions.
It should be highlighted that Proofpoint documented an attack on an American think group in May 2024, demonstrating that the CloudSorcerer activity is not limited to Russia read more about Chinese hacking groups target Russian government and IT firms.
Get up to date on the latest cybersecu...