Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel

[rbc]

Researchers in Google’s Threat Intelligence Group and Mandiant unit have analyzed a recent Chinese cyberespionage campaign where the hackers have managed to dwell in compromised networks for hundreds of days to obtain valuable information.

The attacks involved BrickStorm, a stealthy backdoor used by a Chinese APT tracked as UNC5221 in a 2023 attack targeting MITRE.

The latest BrickStorm campaign was linked by Google researchers to UNC5221, but also to other related Chinese threat actors. While UNC5221 is often reported to be the same as Silk Typhoon, the researchers do not believe them to be the same.
[...]
Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel