NCSC joins partners to issue warning about China state-sponsored cyber activity targeting CNI networks
The UK and agencies in the US, Australia, Canada and New Zealand have issued new advice today (Wednesday) to help organisations detect China state-sponsored activity being carried out against critical national infrastructure networks.
In the new joint advisory the National Cyber Security Centre – a part of GCHQ – alongside international partners highlight how recent activity has targeted networks across critical infrastructure sectors in the US and how the same techniques could be applied worldwide.
The actor has been observed taking advantage of built-in network administration tools on targets’ systems to evade detection after an initial compromise.
The advisory provides technical indicators of compromise and examples of techniques deployed by the actor to help network defenders identify the malicious activity.
Source: National Cyber Security Centre