Chinese Hackers Breach Asian Telecom, Remain Undetected for Over 4 Years

Summary: A major telecommunications company in Asia suffered a breach by Chinese state-sponsored hackers known as Weaver Ant, who maintained a prolonged presence in their systems for over four years. The attackers employed advanced techniques, including the use of web shells and a unique tool dubbed INMemory, to facilitate cyber espionage and maintain access to sensitive data. Concurrently, China accused four Taiwanese individuals of conducting cyber attacks against its infrastructure, highlighting ongoing tensions in cyber warfare in the region.

Affected: Major telecommunications company in Asia

Keypoints :

• Weaver Ant group utilized web shells such as China Chopper and INMemory for stealthy cyber espionage targeting telecommunications.
• The attack involved sophisticated techniques, including patching detection methods and executing PowerShell commands without detection.
• Concurrent allegations arose from China against alleged Taiwanese hackers involved in cyber warfare against the mainland, employing various open-source tools and methods.