'Operation Cloud Hopper' reveals China-based attackers allegedly targeted IT service providers in 15 countries.

Dark Reading Staff, Dark Reading

April 5, 2017

1 Min Read

In what is described as "one of the largest ever sustained global cyber espionage campaigns," China-based hacking group APT10 is suspected of orchestrating a well-planned attack on companies across 15 countries, says The Telegraph, quoting a new report. Managed IT service providers (MSPs) and other firms in countries including the UK, Japan, France, and the US have been targeted since 2016; in some cases, possibly as early as 2014.

The report, by the National Cyber Security Centre (NCSC), BAE Systems, and PwC, points to China as the perpetrator because of the pattern of attacks. It says the attackers are using malware and spear phishing methods to infiltrate MSPs, which Dr. Adrian Nish of BAE described as crucial. "Organisations large and small rely on these providers for management of core systems and as such they can have deep access to sensitive data."

The purpose behind the unmasking operation, codenamed Cloud Hopper, is to spread awareness. The investigators believe attackers are after companies for the "sensitive information they hold, whether that's intellectual property, or personal information on people or a whole realm of other areas."

Click here for more.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights