Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Chinese Military Behind South China Sea Cyber Espionage Attacks
Newest First  |  Oldest First  |  Threaded View
XavierA893
XavierA893,
User Rank: Apprentice
10/30/2015 | 12:49:02 PM
The 78020 unit of the PLA and the territorial agrandizzement
The ThreatConnect and Defense Group Inc. have successfully managed to find and put in their report two documents of which the heading shows the involvement of:

  • Ge XingŠ‹¯ (as the greensky27 member of the Naikon Group such as described in the article)

  • whose unit is indeed the 78020 unit: 'æ78020•"'à

  • from the PLA:'†š l–¯‰ð•úŒR

  • located in the province of Yunnan: ‰_"ì

  • and more specifically in the city of Kunming:©–¾.

 

Ge Xing is actually involved in the study of the region through the titles of the available documents in the ThreatConnect – DGI report:

  • 'ך "ì•"–sz—Ñ•ª—£‰^"®"Iá¢"W–¨ŸÇÍ

A light analysis of the development trend of Muslim separatist movements in Southern Thailand.

  • DŒã'ך "I­¡–¯å‰»i'ö"I"Áêy‹yŒ´ˆö•ªÍ

Cause analysis and features of the political democratisation process in postwar Thailand.

 

At last, the South China Sea draws 'boundless' efforts from mainland China because of its reportedly strategic natural resources and because of its seapower augmentation as a countermeasure to freedom of navigation in what she considers as her patrimonial sea³PŠC.

Best regards,

Xavier Alfonsi

Analyst in naval and naval aviation affairs and in cyberdefense in Asia-Pacific from original sources in Chinese
Elkheart
Elkheart,
User Rank: Apprentice
9/29/2015 | 3:38:55 PM
First comment, Re: PLA/China cyberspying,
"First comment" means there's a new player in the game. For full disclosure, I'm a Native North American, living and working in our new GLOBALLY - connected planet. Our HOME. We really are all in this together, now, folks. Let's remember Bucky Fuller, and acknowledge that we're all crew members of Spaceship Earth. The internet is the command-and-control communications and trade infrastructure for ALL of us. But we're flying through uncharted territory. Safety and security must remain high on our priority lists. Realistically, whether "Ge Xing" is or is not a PLA hacker matters little to me personally. But that's not the point.

Knowledge is power, and power is life. China is a great and ancient nation, but the current

"commmunist" government are as little children in a world of adults. And America is a very young adult.

We just can't afford to let bad actors and bad guys run rampant across our networks.

And the more good guys we have, and the more we know, and can do, the safer and more peaceful and productive we ALL are. We all mostly know all this, but we also need reminding.

(c)2015, Tom Clancy, Jr.,                     *NON-fiction

 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Creating an Effective Incident Response Plan
Security teams are realizing their organizations will experience a cyber incident at some point. An effective incident response plan that takes into account their specific requirements and has been tested is critical. This issue of Tech Insights also includes: -a look at the newly signed cyber-incident law, -how organizations can apply behavioral psychology to incident response, -and an overview of the Open Cybersecurity Schema Framework.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-24999
PUBLISHED: 2022-11-26
qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query strin...
CVE-2022-45909
PUBLISHED: 2022-11-26
drachtio-server 0.8.18 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
CVE-2022-45907
PUBLISHED: 2022-11-26
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
CVE-2022-45908
PUBLISHED: 2022-11-26
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVE-2022-44843
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.