China-Linked Cyber Espionage Network Compromises Governments and Firms Across 21 Nations
A China-linked cyber espionage network has been identified by Check Point Research, compromising governments and companies across 21 nations. The year-long investigation revealed similarities between various cyber espionage campaigns and the use of shared malicious tools capable of infiltrating Windows and Linux systems, stealing confidential information, and compromising corporate networks. Experts found technical coincidences suggesting that several seemingly independent groups might be utilizing malware and infrastructure provided by a common supplier, dubbed CopperDragon. The network's operations include SilentDelivery, targeting Europe and Asia with fake Google Chrome security warnings; OceanGate, primarily active in Asia, especially India, by attacking Linux servers; and DarkWire, focusing on Latin American public administrations and telecommunications operators to collect sensitive data and maintain access.
