China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access
The threat actor with ties to China that exploited security holes in Microsoft Exchange servers in January 2021 using zero-day exploits has changed its strategy to target the IT supply chain in order to gain early access to business networks.
In order to gain traction, the Silk Typhoon (formerly Hafnium) hacking organization is now focusing on IT solutions including cloud apps and remote management tools, according to recent research from the Microsoft Threat Intelligence team.
In order to accomplish their espionage goals, Silk Typhoon uses the credentials and keys they have stolen to breach customer networks and exploit a range of installed applications, such as Microsoft services, according to a report released today by the tech giant read more about China-Linked Silk Typhoon Expa...