Check Point uncovers China-linked cyber espionage network across 21 countries
A year-long investigation by Check Point Research has linked three China-nexus cyber-espionage clusters targeting government, telecommunications, military and critical infrastructure organisations across 21 countries to a common malware and infrastructure ecosystem tracked as CopperDragon.
The investigation suggests that CopperDragon may function as a developer and supplier of malware and infrastructure used by multiple threat actors, rather than operating as a single espionage group. The findings connect activity previously associated with groups including FamousSparrow, Earth Estries, TropicTrooper and UAT-9244.
Check Point identified three operational clusters, named SilentDelivery, OceanGate and DarkWire. Together, they have targeted organisations across Asia, Europe and Latin America, with the investigation uncovering previously undocumented activity in Asia, particularly India.
The researchers also identified previously undocumented Windows and Linux malware, including SquadC, AnnobinDoor and SparrowShell, alongside additional details about the Sparrow framework.
The three clusters employ different methods to compromise organisations. SilentDelivery uses compromised legitimate websites to deliver fake...
Copyright of this story solely belongs to www.expresscomputer.in. To see the full text click HERE
