ANL 34.10 Decreased By ▼ -0.15 (-0.44%)
ASC 13.65 Increased By ▲ 0.30 (2.25%)
ASL 23.40 Increased By ▲ 0.80 (3.54%)
AVN 85.60 Increased By ▲ 1.90 (2.27%)
BOP 7.70 No Change ▼ 0.00 (0%)
BYCO 9.44 Increased By ▲ 0.07 (0.75%)
DGKC 111.51 Increased By ▲ 1.31 (1.19%)
EPCL 48.99 Decreased By ▼ -1.90 (-3.73%)
FCCL 22.85 Increased By ▲ 0.09 (0.4%)
FFBL 25.47 Decreased By ▼ -0.23 (-0.89%)
FFL 15.33 Increased By ▲ 0.03 (0.2%)
HASCOL 8.94 Decreased By ▼ -0.06 (-0.67%)
HUBC 78.43 Decreased By ▼ -0.57 (-0.72%)
HUMNL 6.13 Increased By ▲ 0.29 (4.97%)
JSCL 19.14 Increased By ▲ 0.44 (2.35%)
KAPCO 40.50 Increased By ▲ 1.11 (2.82%)
KEL 3.72 Increased By ▲ 0.04 (1.09%)
LOTCHEM 14.20 Decreased By ▼ -0.15 (-1.05%)
MLCF 42.75 Increased By ▲ 0.45 (1.06%)
PAEL 30.90 Decreased By ▼ -0.17 (-0.55%)
PIBTL 9.52 Increased By ▲ 0.07 (0.74%)
POWER 8.61 Increased By ▲ 0.17 (2.01%)
PPL 82.50 Decreased By ▼ -0.80 (-0.96%)
PRL 23.09 Increased By ▲ 0.32 (1.41%)
PTC 9.00 Decreased By ▼ -0.20 (-2.17%)
SILK 1.38 Decreased By ▼ -0.02 (-1.43%)
SNGP 38.90 Increased By ▲ 0.31 (0.8%)
TRG 165.00 Increased By ▲ 1.78 (1.09%)
UNITY 35.80 Increased By ▲ 0.87 (2.49%)
WTL 1.53 Increased By ▲ 0.08 (5.52%)
BR100 4,846 Increased By ▲ 46.43 (0.97%)
BR30 24,817 Increased By ▲ 123.55 (0.5%)
KSE100 45,175 Increased By ▲ 231.06 (0.51%)
KSE30 18,470 Increased By ▲ 86.89 (0.47%)

Coronavirus
VERY HIGH
Pakistan Deaths
18,993
7824hr
Pakistan Cases
861,473
344724hr
Sindh
292,644
Punjab
319,365
Balochistan
23,447
Islamabad
78,200
KPK
124,484
Technology

Chinese hackers behind VPN attack on US defence firms: security experts

  • There was no assessment of how many companies were affected or what the hackers did with their access to the networks.
21 Apr 2021

WASHINGTON: Chinese hackers allegedly penetrated a company's VPN technology to break into computer networks of the US defence industry sector, security consultant Mandiant said Tuesday.

Mandiant linked at least two hacking groups, one of them believed to be an official Chinese cyber-spying operation, to malware used to exploit vulnerabilities in VPN security devices made by Pulse Secure, owned by Utah-based Ivanti.

The group used the malware to try to hijack user and administrator identities and enter the systems of US defense industry companies between October 2020 and March 2021, Mandiant said.

It said that governments and financial firms in the US and Europe were also targeted.

It called one of the hacking groups UNC2630. "We suspect UNC2630 operates on behalf of the Chinese government and may have ties to APT5," it said, referring to a known Chinese state-sponsored hacking group.

It said a "trusted third party" also tied the hacking to APT5.

"APT5 persistently targets high value corporate networks and often re-compromises networks over many years. Their primary targets appear to be aerospace and defense companies located in the US, Europe, and Asia," Mandiant said.

it said it did not have enough information to identify who was behind some of the malware.

There was no assessment of how many companies were affected or what the hackers did with their access to the networks.

Pulse confirmed the main parts of the Mandiant report, saying that it had already released fixes to its products to block the malware.

Pulse said the hackers impacted "a limited number of customers."