REUTERS
August 28, 2024 at 10:55 JST
A worker miniature is placed among printed circuit boards with semiconductor chips, in this illustration picture taken July 5, 2023. (REUTERS)
WASHINGTON--A Chinese hacking group exploited a software bug to compromise several internet companies in the U.S. and abroad, a cybersecurity firm said on Tuesday.
Researchers at the firm, Lumen Technologies, said in a blog post that the hackers took advantage of a previously unknown vulnerability in Versa Director - a software platform used to manage services for customers of Santa Clara, California-based Versa Networks. It said four U.S. victims and one Indian victim had been identified, although it declined to identify them.
Versa Networks issued an advisory on Monday acknowledging that the vulnerability had been exploited “in at least one known instance” by an advanced group of hackers and urged customers to update their software to fix the bug.
Lumen’s blog post said that its researchers assessed with “moderate confidence” that the hacking campaign, which kicked off as early as June 12, was carried out by an alleged Chinese government-backed group nicknamed “Volt Typhoon.” Lumen researcher Ryan English said that the internet companies were targeted for the attackers to surveil their customers.
“They very rarely go in through the front door,” he said.
Doug Britton, an executive with Virginia-based RunSafe Security, said the research appeared sound and that the access described by Lumen would allow a group like Volt Typhoon “the ability to do broad, silent surveillance.”
The Chinese Embassy in Washington did not respond to a request seeking comment, although Beijing routinely denies allegations of its involvement in cyberespionage. On Friday, the U.S. Cybersecurity and Infrastructure Security Agency added the Versa vulnerability to its list of “known exploited vulnerabilities.”
Brandon Wales, the recently departed executive director of CISA, was quoted by the Washington Post on Tuesday saying that China’s hacking effort had “dramatically stepped up from where it used to be.” Volt Typhoon has emerged as a group of particular concern to U.S. cybersecurity officials. In April, FBI Director Christopher Wray said China was developing the “ability to physically wreak havoc” on U.S. critical infrastructure.
U.S. says it disrupted a China cyber threat, but warns hackers could still wreak havoc
February 1, 2024
Malicious update anchored worst cyberattack of Ukraine war
March 31, 2022
Chinese spies breached hundreds of public, private networks, security firm says
June 16, 2023
The security flaw that’s freaked out the internet
December 15, 2021
Report: Chinese state-sponsored hacking group highly active
March 31, 2023
Chinese hackers have stepped up attacks on Taiwanese organizations, cybersecurity firm says
June 24, 2024
Here is a collection of first-hand accounts by “hibakusha” atomic bomb survivors.
A peek through the music industry’s curtain at the producers who harnessed social media to help their idols go global.
Cooking experts, chefs and others involved in the field of food introduce their special recipes intertwined with their paths in life.
A series based on diplomatic documents declassified by Japan’s Foreign Ministry
A series about Japanese-Americans and their memories of World War II
