http://www.darkreading.com/attacks-breaches/chinese-cyberespionage-brazen-prolific-a/240153934
By Kelly Jackson Higgins
Dark Reading
April 30, 2013
China, China, China: New data and intelligence is shedding more light on
just how bold and pervasive Chinese cyberespionage activity is today.
Tracing malware and breaches to their attackers is not straightforward
-- anyone can hide behind layers of IP addresses -- but China has been
confirmed as a major player in cyberespionage in multiple reports this
month, as both Verizon and FireEye independently have released data that
points the finger at the country for the bulk of cyberspying activity.
And even after Mandiant's exhaustive report on a long-suspected Chinese
military link to cyberespionage against U.S. firms that was published in
February, the APT1/Comment Crew gang behind that operation appears to be
back in action despite the publicity the report drew.
The APT1/Comment Crew appears to have done little to change its tactics
and methods of attack even after it was unmasked with key intelligence
from Mandiant.
"I was personally part of the camp that thought these guys would change
significantly" after the Mandiant report was published, says Rich
Barger, chief intelligence officer with Cyber Squared, which last week
unveiled new evidence of the group targeting the defense and aerospace
community using many of the same techniques and command-and-control
(C&C) capabilities as before.
[...]
______________________________________________
Visit the InfoSec News Security Bookstore
Best Selling Security Books and More!
http://www.shopinfosecnews.org
