Chinese hackers exploit zero-day vulnerability to target US infrastructure

[LAUREN TAYLOR]

CHINESE STATE-SPONSORED HACKERS HAVE USED A CRITICAL ZERO-DAY VULNERABILITY TO INFILTRATE AND INFECT AMERICAN INTERNET COMPANIES AND SERVICE PROVIDERS.

CYBER SECURITY EXPERTS WITH LUMEN TECHNOLOGIES SAY — THE SOPHISTICATED ATTACK IS ATTRIBUTED TO THE GROUP “VOLT TYPHOON” AND AIMS TO COMPROMISE CRITICAL U-S INFRASTRUCTURE, STEAL CREDENTIALS AND POTENTIALLY DISRUPT U-S MILITARY CAPABILITIES IN FUTURE CONFLICTS, PARTICULARLY CONCERNING TAIWAN.

AT LEAST FOUR U-S-BASED ORGANIZATIONS -AND ONE IN INDIA HAVE BEEN IMPACTED BY THE VULNERABILITY WITH THE ATTACKS BEGINNING AS EARLY AS JUNE 12TH 2024. 

THE ATTACKERS UTILIZED A HIGHLY ADVANCED CUSTOM WEB SHELL CALLED “VERSAMEM” WHICH IS A SOPHISTICATED MALWARE THAT FOCUSES ON CREDENTIAL THEFT AND POSES A SIGNIFICANT THREAT TO TARGETED NETWORKS AND THEIR USERS.

CYBER SECURITY EXPERTS SAY THE ATTACKS’ SOPHISTICATION SHOW GLOBAL CYBER WARFARE IS ESCALATING WITH CRITICAL INFRASTRUCTURE AS THE PRIMARY TARGET.

IN A BLOG POST, LUMEN GIVES SEVERAL RECOMMENDATIONS FOR AMERICAN COMPANIES — TO TAKE PROACTIVE STEPS – TO PROTECT THEMSELVES AGAINST HACKING.

ONE RECOMMENDATION IS PROPER IMPLEMENTATION OF FIREWALL GUIDELINES — WHICH COULD PREVENT EXPLOITATION, AMONG OTHERS.

FOR STRAIGHT ARROW NEWS, I’M LAUREN TAYLOR…

FOR MORE UNBIASED, STRAIGHT FACTS — DOWNLOAD THE SAN APP.