<p data-changed="false" data-paragraphid="3">Researchers have revealed a sophisticated Winnti cyber attack that makes use of Windows systems in a "rarely observed" method.</p>

<p data-changed="false" data-paragraphid="5">According to Cybereason, the campaign is being carried out by the Chinese advanced persistent threat (APT) group Winnti, which has gone undiscovered for years.</p>

<p data-changed="false" data-paragraphid="6">APT 41, or "Winnti" – which also goes by the affiliate names BARIUM and Blackfly – is one of the most prolific and successful Chinese state-sponsored threat groups, with a history of launching CCP-backed espionage and financially motivated attacks on U.S. and other international targets, which are frequently aligned with China's Five-Year economic development plans.</p>

<div class="ui-state-default" contenteditable="false">
<div class="row">
<div class="article-blockquote">
<div class="col-sm-10 col-sm-offset-1 blockquote-content quoteshare">
<blockquote>
<h5>APT 41, a renowned Chinese state actor, has sucked out an estimated trillions in intellectual property theft from approximately 30 international corporations in the manufacturing, energy, and pharmaceutical sectors over the course of several years.</h5>
</blockquote>
</div>

<div class="col-sm-1 blockquote-content">
<div class="share-blockquote"><a class="twitter popup" href="http://twitter.com/intent/tweet?text=APT 41, a renowned Chinese state actor, has sucked out an estimated trillions in intellectual property theft from approximately 30 international corporations in the manufacturing, energy, and pharmaceutical sectors over the course of several years." target="_blank"><i class="fa fa-share">&nbsp;</i></a></div>
</div>
<a class="close-mark close-div" href="#" id="jqquoteclosemark">×</a></div>
</div>
</div>

<p>Cyberattacks targeting video game makers, software vendors, and colleges in Hong Kong have all been linked to the group in the past. When the critical vulnerabilities in Microsoft Exchange Server ProxyLogon were first made public, Winnti, along with other APTs, made use of them.</p>

<p><strong>Watch | Gravitas: How China breached thousands of organisations with one hacking operation</strong></p>

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/gravitas-how-china-breached-thousands-of-organisations-with-one-hacking-operation-399317/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

<p data-changed="false" data-paragraphid="8">Cybereason said it briefed both the FBI and the US Department of Justice (DoJ) on the APT's campaign, which has been active since 2019 but was just recently identified, in two reports issued on Wednesday.</p>

<p data-changed="false" data-paragraphid="9">According to cybersecurity experts, clandestine operations have targeted the networks of technology and manufacturing organisations in Europe, Asia, and North America, with the goal of obtaining valuable private data.</p>

<p data-changed="false" data-paragraphid="10">Winnti's "multi-stage infection chain," dubbed "Operation CuckooBees," starts with exploiting weaknesses in enterprise resource planning (ERP) software and the deployment of the Spyder loader. Some of the exploited issues were known, but others were zero-day vulnerabilities, according to the researchers.</p>


Researchers have revealed a sophisticated Winnti cyber attack that makes use of Windows systems in a "rarely observed" method. According to Cybereason, the campaign is being carried out by the Chinese advanced persistent threat (APT) group Winnti, which has gone undiscovered for years.

Researchers have revealed a sophisticated Winnti cyber attack that makes use of Windows systems in a "rarely observed" method. According to Cybereason, the campaign is being carried out by the Chinese advanced persistent threat (APT) group Winnti, which has gone undiscovered for years. APT 41, or "Winnti" – which also goes by the affiliate names BARIUM and Blackfly – is one of the most prolific and successful Chinese state-sponsored threat groups, with a history of launching CCP-backed espionage and financially motivated attacks on U.S. and other international targets, which are frequently aligned with China's Five-Year economic development plans. APT 41, a renowned Chinese state actor, has sucked out an estimated trillions in intellectual property theft from approximately 30 international corporations in the manufacturing, energy, and pharmaceutical sectors over the course of several years. × Cyberattacks targeting video game makers, software vendors, and colleges in Hong Kong have all been linked to the group in the past. When the critical vulnerabilities in Microsoft Exchange Server ProxyLogon were first made public, Winnti, along with other APTs, made use of them. Watch | Gravitas: How China breached thousands of organisations with one hacking operation Cybereason said it briefed both the FBI and the US Department of Justice (DoJ) on the APT's campaign, which has been active since 2019 but was just recently identified, in two reports issued on Wednesday. According to cybersecurity experts, clandestine operations have targeted the networks of technology and manufacturing organisations in Europe, Asia, and North America, with the goal of obtaining valuable private data. Winnti's "multi-stage infection chain," dubbed "Operation CuckooBees," starts with exploiting weaknesses in enterprise resource planning (ERP) software and the deployment of the Spyder loader. Some of the exploited issues were known, but others were zero-day vulnerabilities, according to the researchers.

Operation CuckooBees: Notorious Chinese hackers took trillions of dollars from about 30 companies

operation-cuckoobees

Operation Cuckoobees, News on Operation Cuckoobees, stories on Operation Cuckoobees, articles on Operation Cuckoobees, Operation Cuckoobees stories at Wion, Operation Cuckoobees news, Operation Cuckoobees latest news

operation cuckoobees

Operation CuckooBees: Notorious Chinese hackers took trillions of dollars from about 30 companies