China has emerged as the leader in vulnerability exploitation | CrowdStrike | VARINDIA News Hour

#VARINDIA_News_Hour #VARINDIA #Breaking_News

There are countries which are increasingly turning to #cyberattacks and data theft - and the rise of cloud services is helping them. Crowdstrike's 2022 Global Threat Report details how the cyber-threat landscape has evolved during the past year. The report says, it had confirmed the exploitation of two vulnerabilities published in 2020 by China-nexus advanced persistent threat (APT) actors – in Oracle WebLogic and Zoho ManageEngine, respectively – but that last year it was able to confirm 12 vulnerabilities and nine different products being exploited, linked to 10 known APTs, including the infamous Wicked Panda (aka APT41 or Barium). The analysts said that although Chinese APTs have long developed and deployed their own exploits in the targeted intrusions, 2021 saw an increased volume of activity from Chinese APTs, highlighting an evolution in how these groups go about their work. These countries are seeing that cyber campaigns can be easier to conduct than traditional espionage and are investing in these techniques. “In contrast, exploits deployed by these actors in 2021 focused heavily on vulnerabilities in internet-facing devices or services. Among the vulnerabilities favoured by Chinese APTs in 2021 were the Microsoft Exchange bugs collectively known as ProxyLogon and ProxyShell, and other networking products such as VPNs and routers. They are also increasingly looking to enterprise software products hosted on internet-facing servers.

The team of #CrowdStrike assessed that these exploits are largely being independently developed in-house or, in a new twist, acquired from legitimate sources in China. Exploits submitted at the Tianfu Cup have later been acquired by Chinese targeted intrusion actors for use in their operations. In several 2021 incidents, Chinese actors demonstrated an ability t.