Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

Top cyber espionage groups that have India in their crosshairs

<ul><li>Jio, Airtel, Cipla, MRF Tires, Sun Pharmaceuticals and other commercial companies have been tagged as targets by <keyword id="149865" type="PERSON" weightage="20" keywordseo="Chinese-hackers">Chinese hackers</keyword>. </li><li>Cybersecurity firm CYFIRMA has determined that two Chinese hacker groups — Ghost Panda and Stone Panda are looking to damage the companies’ reputation and extract trade secrets.</li><li>The motivation behind the attacks is to “teach India a lesson”.</li></ul>There’s a flurry of activity on the dark web and hackers’ forums as a reaction to the ongoing India-China border dispute in Galwan Valley. The two main hacking groups behind the rhetoric are China-based Gothic Panda and Stone Panda. Cybersecurity firm CYFIRMA Research reports that notable organisations like Jio, Airtel, Cipla and others are on the radar of Chinese hackers to “teach India a lesson”. Other comments translated from Mandarin included “this is one nation who doesn’t listen to us”. <div type="image" title="hack_edited" msid="76528295" hostid="261" caption="&amp;lt;p&amp;gt;Screen from Chinese hackers community forum&amp;lt;/p&amp;gt;"></div> As per their observations, CYFIRMA has shared three lists — commercial organisations, media companies, and government websites — that are potential targets as per the conversations they observed between the Chinese hacking community. Commerical organisations on Chinese hackers target list: <ol><li>Jio</li><li>MRF Tires</li><li>Sun Pharmaceuticals</li><li>Airtel</li><li>Cipla</li><li>Intex Technologies</li><li>Micromax</li><li>BSNL</li><li>Apollo Tires</li><li>L&amp;T</li></ol>According to CYFIRMA, the objective of hacking commercial organisations listed above is to cause reputation damage and extract any sensitive information that could hamper their operations — including trade secrets. Government sites on Chinese hackers target list: <ol><li>Ministry of Foreign Affairs</li><li>Ministry of Defence</li><li>Ministry of Information and Broadcasting</li></ol>The motivation for hacking government sites is to ‘name and shame’ them as per CYFIRMA’s report. The same applies to media houses on their target list. Media houses on Chinese hackers target list: <ol><li>Times of India</li><li>Republic TV</li><li>NDTV</li><li>Hindustan Times</li><li>X-TV</li><li>Aaj Tak</li><li>Dainik Jagran</li></ol>Meet the hackers behind the threat to Indian organisations Gothic Panda — also known at APT3, UPS and TG-011 — has been <a href="https://www.recordedfuture.com/chinese-mss-behind-apt3/">directly attributed</a> to the Chinese Ministry of State Security in the past. It has been behind campaigns like Operation Clandestine Fox, Double Tap and Clandestine Wolf in the past. Gothic Panda’s repertoire of victims include companies in the defence, telecommunications, transportiation, and advanced technology sectors. They have also been known to hack into government departments and bureaus in Hong Kong, the US, and several other countries. Stone Panda — also known APT10, Red Apollo, CVNX, HOGFISH and most popularly, menuPass — been known to originate in China and been active since 2009. In 2017, Palo Alto detected that the hacker group was targetting Japanese Academics and organisations with malware. In another investigation, FireEye found that Stone Panda was using a Remote Accessibility Trojan (RAT) — which gives the hackers to control your device from anywhere — to run reconnaissance, extract intelligence, and plant malware. SEE ALSO: <a href="https://www.businessinsider.in/tech/the-10-most-infamous-hackers-of-all-time/slidelist/46883316.cms">The 10 most infamous hackers of all time</a> <a href="https://www.businessinsider.in/tech/news/chinese-hackers-crack-through-indias-industry-department-website-with-mediation/articleshow/76510233.cms">Chinese hackers crack through India's Industry Department website with "mediation"</a> <a href="https://www.businessinsider.in/tech/news/sbi-warns-2-million-users-may-be-at-risk-of-phishing-attacks-in-delhi-mumbai-and-other-major-cities/articleshow/76505433.cms">SBI warns 2 million users may be at risk of phishing attacks in Delhi, Mumbai and other major cities</a>

Top 20 Indian organisations under threat of attack from Chinese hackers to “teach India a lesson” amid border tension

<ul><li>The Indian IT giant, <keyword id="6357585" type="COMPANY" weightage="20" keywordseo="tata-consultancy-services">Tata Consultancy Services</keyword> (<keyword id="6357150" type="ORGANIZATION" weightage="20" keywordseo="tcs">TCS</keyword>) reportedly has been a victim of ‘<keyword id="7804163" type="UNKNOWN" weightage="20" keywordseo="operation-cloud-hopper">Operation Cloud Hopper</keyword>’, a global cyber espionage campaign attributed to China.</li><li>An investigative report by Reuters shows how several global IT companies, including TCS, were used to gain access to their client’s networks. </li><li>China is denying all involvement in the attacks and companies are claiming that no sensitive information was compromised, but the Reuters report shows otherwise.</li></ul>‘Operation Cloud Hopper’ — a global cyber espionage campaign — first made headlines when Chinese hackers reportedly broke past IBM and Hewlett Packard Enterprise. Now, it seems that they weren’t the only ones attacked. Other tech companies, including Tata Consultancy Services — an Indian tech giant and one of the <a href="https://www.businessinsider.in/tcs-wipro-and-hcl-are-among-the-worlds-most-valued-it-brands/articleshow/67670849.cms">biggest IT firms in the world</a> — were also victims of hackers working for China’s Ministry of State Security, according to <a href="https://www.reuters.com/article/us-china-cyber-cloudhopper-companies-exc/exclusive-china-hacked-eight-major-computer-services-firms-in-years-long-attack-idUSKCN1TR1D4">Reuters</a>. That too, for years. It isn’t just TCS that was hacked. The service provider was used as a jumping off point to gain access to their <a href="https://www.businessinsider.in/india-post-upgraded-by-tcs-in-hopes-of-cutting-losses/articleshow/68989343.cms">client’s networks</a>. TCS did not respond when contacted for comments. Denial Mode Nobody wants to accept that the hack actually happened. The Chinese government denied any involvement. The companies claimed that no sensitive information was compromised, but a Reuters investigation shows otherwise. In order to hack into a service provider’s server, Operation Cloud Hopper used ‘spear phishing’ emails. This is where emails are sent to the company’s employees in hopes of tricking them into downloading malware or disclosing their passwords. Normally, that would involve impersonating an employee using the directories of credentials that the hackers had at their disposal, according to Reuters. Once this phase is successful, hackers start to map out the environment so that they can establish a foothold and make their way towards the real target, the system administrator. The administrator is important because it controls the company’s ‘jump servers’ — a bridge between a service provider and its client’s networks. After that, it’s just a matter of segregating sensitive information from the jumble of data on the victim’s network. Reuters reports that it wasn’t a random search either, as the hackers knew exactly where to look and find sensitive information. The commercially sensitive data is copied either directly from the client network or back through the service provider. Many companies like Hewlett Packard, didn’t even know that they had been hacked for the first couple of years. But once they did find the vulnerability, getting rid of it was a different story altogether. Though were ever able to pick off the hacker footholds one by one, the tricky infiltrators found new ways to come back stronger. The cycle continued for at least five years, according to Reuters. ‘Operation Cloud Hopper’ and its many attempts to hack into IT companies have mostly been kept under wraps at the behest of the corporate victims. But, the US government, after years of trying to contain the threat finally dubbed the hackers Advanced Persistent Threat 10 (APT10) in December 2018. See also: <a href="https://www.businessinsider.in/india-post-upgraded-by-tcs-in-hopes-of-cutting-losses/articleshow/68989343.cms" style="">The company that transformed India's passport offices is also working on post offices</a> <a href="https://www.businessinsider.in/hiring-tcs-infosys-wipro-and-others-up-12-months-in-a-row/articleshow/69019342.cms" style="">Hiring by Indian IT companies has grown 12 months in a row, up over three-fold</a> <a href="https://www.businessinsider.in/tcs-wipro-and-hcl-are-among-the-worlds-most-valued-it-brands/articleshow/67670849.cms" style="">TCS is now the world’s third most valued IT service brand</a>

TCS was hacked for its clients by China’s cyber spy campaign: Report

<div class="KonaFilter image-container display-table"><div><div class="image on-image">Reuters/Tyrone SiuHuawei's Cyber Security Lab at its factory campus in China's Guangdong province.</div></div></div><ul class="summary-list"><li>US companies caught up in the quagmire of Trump's blacklist on Huawei extends far beyond Google, Intel, Broadcom, and Qualcomm.</li><li>Many <keyword id="6356323" type="UNKNOWN" weightage="100" keywordseo="enterprise">enterprise</keyword> software companies sell their wares to the Chinese giant, and have joint tech development or sales agreements.</li><li>Those companies could be required to get US government approval to continue their business relationship with Huawei, and those licenses won't be easy to obtain, Yale professor and global competition expert Paul Bracken tells Business Insider.</li><li><a href="http://www.businessinsider.com/">Visit BusinessInsider.com for more stories</a>.</li></ul>"We are honored to expand our strategic relationship with Huawei, enabling leading global telecommunication companies with the power of open source to innovate and compete," Red Hat's telecom marketing director Margaret Dawson <a href="https://www.redhat.com/en/about/press-releases/huawei-extends-its-cooperation-red-hat-public-and-nfv-clouds">said in a press release back in 2017</a>.But, like much of the tech industry, Red Hat may not be feeling so cheery about the "strategic relationship" with the embattled Chinese telecommunications giant these days. <div class="KonaFilter image-container display-table float_right"><div><div class="image on-image"><a href="https://som.yale.edu/faculty/paul-bracken">Yale</a>Yale professor Paul Bracken</div></div></div>Last week, the Trump administration added <a href="https://www.businessinsider.com/google-intel-qualcomm-reportedly-cut-off-critical-software-to-huawei-2019-5">Huawei to a trade blacklist.</a>Most of the attention has been on American components suppliers like <a href="https://www.bloomberg.com/news/articles/2019-05-19/google-to-end-some-huawei-business-ties-after-trump-crackdown">Intel, Qualcomm, Broadcom and Google</a> who have reportedly cut off critical parts to Huawei thanks to that ban.But there's another whole part of the tech industry grappling with what to do: enterprise software.Companies like VMware, Red Hat, Microsoft, IBM, Oracle and even, to a minor extent, Amazon Web Services - which otherwise competes with <a href="https://www.huaweicloud.com/en-us/about/about_us.html">Huawei's own cloud computing services </a>- have business dealings with Huawei, of one sort or another. In some cases, Huawei <a href="https://mediacenter.ibm.com/media/Huawei+reduces+time+to+market+by+50+using+IBM+Rational+Rhapsody/1_7n68s7kc">buys their software</a> for its own infrastructure needs; in others those companies <a href="https://e.huawei.com/en/material/onLineView?MaterialID=e9b9149dff044306bbfae5c40a122175">bundle their software</a> <a href="https://marketplace.vmware.com/vsx/company/huawei-technologies-co-ltd">with Huawei's hardware</a> to sell to their joint customers, or otherwise have agreements to market jointly-<a href="https://www.huawei.com/en/press-events/news/2016/9/huawei-Oracle-huhui-hezuo">developed products</a> together. Some cloud providers <a href="https://azure.microsoft.com/en-gb/overview/azure-stack/partners/huawei/">allow Huawei to sell its software</a> on their platforms.Oracle and Microsoft declined to comment on their policies regarding Huawei. The other companies have yet to return Business Insider's request for comment. <h2>A big hurdle</h2>It's not clear that all of the relationships will be immediately cut off. But the blacklist prevents American companies from the "sale or transfer" of their technology to Huawei without a government license to do so, the Department of Commerce warns. And such licenses will almost certainly be hard to get, <a href="https://som.yale.edu/faculty/paul-bracken">Yale professor Paul Bracken</a> tells Business Insider. Bracken is a prominent expert on global competition, national security, and technology strategy."It'll be hard and slow to get a license from DoC because they are not remotely equipped to handle the volume and complexity of the requests. Imagine them farming out a request to DoD or CFIUS for their opinion, it'll just bring in another under equipped agency to the process," Bracken said. The Committee on Foreign Investment in the United States (CFIUS) is a rather mysterious committee that reviews deals with foreign entities. Under Trump it has already <a href="https://www.chinalawblog.com/2019/01/new-cfius-rules-shut-down-chinese-investment-in-u-s-technology.html">severely clamped down on deals</a> involving China's investment in the US."International business for the past 20 years has been built on agile cross-border value chains. Now, a big break in the circuit has been installed," as Bracken describes Trump's cold war on Chinese tech."Companies will be extraordinarily averse to discussing this issue for fear of pissing off the Chinese authorities. Bringing attention to your American character is going to put you in the cross hairs of officials in China who are looking for a target to bag," Bracken said.<h2>Getting 'ugly'</h2>But the escalation of tensions between the US and China is ugly for multinational software companies for other reasons. These companies "are about to get squeezed in China more than they already have. From China's viewpoint they have few restraints on even larger IP theft because US firms are shutting down in China. This may be their last chance to get some IP before they go out the door," Bracken said.He offers up, by way of example, Oracle's actions earlier this month, when <a href="https://www.zdnet.com/article/oracle-said-to-close-chinas-r-d-center-axing-nearly-1000-employees/">it shut down its R&amp;D center in China,</a> laying off about 1000 people."Trying to sell US products in China is getting a lot more difficult. Even some US consumer products companies I know are worried, although I don't think they actually have much to fear," Bracken says.He says another impact of escalating tensions is that "Beijing fears US cyber penetration of their infrastructure as a counter to what China has done in the US and Europe," he said. The United States government and domestic tech firms have long suspected and accused China of employing state-sponsored hackers to steal American and European intellectual property. For instance, in December, the FBI and Justice Departments charged two men with hacking, and alleged their association with a bigger group known as Advanced Persistent Threat 10, or APT 10, a hacking group associated with the Chinese government, <a href="https://www.fbi.gov/news/stories/chinese-hackers-indicted-122018">the FBI said. </a>Former Cisco CEO John Chambers has been sounding the alarm against Huawei, <a href="https://www.businessinsider.com/cisco-ceo-john-chambers-slams-his-chinese-competitor-hints-it-steals-stuff-2012-4">specifically, since 2012.</a><h2>US executives working in China might have cause to be afraid</h2>But the most terrifying prospect of all is fear for the safety of US executives of tech companies working in China, after the arrest of Huawei's CFO, Meng Wanzhou, who is the daughter of Huawei Technologies' billionaire founder Ren Zhengfei.She's still under house arrest in a six-bedroom, multi-million dollar home, fighting extradition from Canada to the US. If US tech execs are arrested in China as some sort of retribution, they might well be afraid that they wouldn't be treated so well."Even the threat of criminal prosecution scares US [multinational corporations] to death. The thought of sitting in a jail cell in China is terrifying," Bracken said, pointing out that in many other countries, law enforcement don't treat those accused of civil offenses differently than those accused of criminal ones. "Accountants have been thrown in jail for violating audit rules in India. So even if arrests are few and far between, the impact of it will be quite large," he warns. <div class="margin-top"> <h3>NOW WATCH: <a href="https://www.businessinsider.com/allison-mack-nxivm-alleged-sex-slave-ring-keith-raniere-seagrams-heiress-2019-4">Nxivm founder Keith Raniere began his trial. Here's what happened inside the alleged sex-slave ring that recruited actresses and two billionaire heiresses.</a></h3> <div> </div> </div>

Trump's blacklist of Huawei has serious implications for Red Hat, Oracle, VMware and other huge US software companies

<div class="KonaFilter image-container display-table"><div><div class="image"></div></div></div><ul class="summary-list"><li>Australian companies have been the target of a fresh wave of China-originated cyberattacks this year as part of a "constant, significant effort" to plunder corporate assets and intellectual property, according to a report released Tuesday.</li><li>Beijing has rejected the claims that China's top security agency planned and directed a surge in cyber attacks on Australian companies.</li><li>The report alleges the coordinated attacks also broke a personal agreement struck between China's Premier Li Keqiang and the former Australian Prime Minister Malcolm Turnbull that both countries would put a stop to the theft of each other's commercial secrets.</li><li>A foreign ministry spokesperson provided China's stock responses to accusations of hacking: "groundless, speculative, unprofessional and irresponsible."</li></ul>SYDNEY, Australia - China's foreign ministry has recorded its usual annoyance following an investigation into Chinese corporate hacking in Australia that comes only days after US Vice President Mike Pence pointed the finger at Beijing for its overwhelming "intellectual property theft".China's peak security agency has been overseeing a surge in cyberattacks on Australian companies over the past year, in an operation dubbed "Operation Cloud Hopper," and at the behest of China's Ministry of State Security according to a report by Fairfax Media and broadcaster Channel Nine.The Cloud Hopper cyber-espionage campaign was first uncovered by security researchers at PwC, BAE Systems, and the UK's National Cyber Security Centre.Those researchers concluded in 2017 that the campaign was the work of the China-based, People's Liberation Army connected APT10 hacking group.In 2016, US security firm Mandiant released the report "APT1 Exposing One of China's Espionage Units," describing the term as Advanced Persistent Threat 1, "a single organization of operators that has conducted a cyber-espionage campaign against a broad range of victims since at least 2006."On Tuesday, unnamed senior Australian officials are cited in the Fairfax report as saying this recent surge of attacks targeting sectors across the Australian economy from "industry to corporate and military" were confirmed by the "Five Eyes" intelligence alliance.Five Eyes is the name given to an intelligence-sharing network made up of the US, Britain, Canada, Australia, and New Zealand, as part of the same campaign.The senior Australian government source told Fairfax the activity was "a constant, significant effort to steal our intellectual property," and that China's Ministry of State Security was responsible for Operation Cloud Hopper.Australian universities and network providers have attracted criticism for lax security measures.The massive uptick in activity was also backed up by the vice president of the US cybersecurity company CrowdStrike, Mike Sentonas.Following a deal struck between the Chinese premier and Australian prime minister earlier in 2017, Sentonas said that from the beginning of this year, he had "noticed a significant increase in attacks.""The activity is mainly from China and it's targeting all sectors," he told Fairfax."There's no doubt the gloves are off."Read more: <a href="https://www.businessinsider.com.au/australia-top-spy-on-chinese-tech-and-key-infrastructure-in-canberra-2018-10">Australia's top cyber spy says China's tech is too good to be allowed near key infrastructure</a>One senior Australian government source said China's mission was "a constant, significant effort to steal our intellectual property."The cyber theft places intense pressure on Australian Prime Minister Scott Morrison to respond as the cyber security pact signed between the two countries only last year appears to be in question.In response the Chinese foreign ministry rolled out its standard response to what is now a well-practiced routine.Ministry spokesman Geng Shuang told the regular press briefing in Beijing that the accusations were groundless or "without factual basis.""The speculative report without factual basis is irresponsible and unprofessional," (没有事实根据的臆测报道是不负责任、不专业的), Geng said.**In 2013 a foreign ministry spokesman Hong Lei made the same observation at his regular press briefing when asked to comment on a report then released by the US security company Mandiant, that singled out the People's Liberation Army (PLA) for conducting cyber espionage against Western countries for years. "The speculative report without factual basis and groundless criticism is irresponsible and unprofessional." he said.Two years earlier Lei called a very blunt report on China's role foreign cyber spying submitted to the US Congress in November, 2011, as speculative and both unprofessional and irresponsible."And remember when North Korea successfully Sony Pictures in 2014?"This kind of speculative report without factual basis is irresponsible and unprofessional," then foreign ministry spokesmen Hua Chunying said.**China has a rich legacy of infuriating Western governments that have routinely accused it of plundering industrial, corporate and military secrets.Last year, sensitive data about Australia's F-35 stealth fighter and P-8 surveillance aircraft programmes were stolen when a defence subcontractor was hacked with a tool widely used by Chinese cyber criminals.The Australian Federal Police and Australian Security Intelligence Organisation (ASIO) have reportedly intensified their cooperation to respond to the threat.However, a senior police source said in the report that they are many months behind the US.Without enforcement, there was no effective deterrence, the report said, citing one national security source.The Australian Signals Directorate (ASD) the country's top cyber enforcement agency has detected attacks against several Western businesses, although the names of the affected firms have not been made public.Meanwhile, the systems of Australian <keyword id="6354810" type="UNKNOWN" weightage="100" keywordseo="defense">defense</keyword> contractor Austal were also breached last month as part of a subsequent extortion attempt.The source of the attack has not yet been confirmed, but officials say that this time the attack may have came out of the Middle East with Iran the most likely culprit, according to the Australian Cyber Security Centre.

You Searched For "apt10" and got 5 results

Top cyber espionage groups that have India in their crosshairs

Prabhjote Gill

Top 20 Indian organisations under threat of attack from Chinese hackers to “teach India a lesson” amid border tension

Prabhjote Gill

TCS was hacked for its clients by China’s cyber spy campaign: Report

Prabhjote Gill

Trump's blacklist of Huawei has serious implications for Red Hat, Oracle, VMware and other huge US software companies

Julie Bort

China's top security agency is accused of directing a wave of cyberattacks against Australia

Christian Edwards,Christian E…

Popular Keywords

Buying Guides