FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
-
According to an October 8 advisory from the FBI and agencies in 6 other countries, hackers connected to a Chinese cybersecurity firm, Integrity Technology Group, stole email from organizations across Southeast Asia. The victims included government bodies, law enforcement agencies, healthcare systems, and religious institutions. Integrity Technology Group has already been sanctioned by both the U.S. and the UK.
The group's operators scanned websites for flaws using a tool that contained more capability than a simple scanner, and they reportedly ran a portal that gave third parties access to the stolen emails. That portal model effectively turned the intrusions into a service others could leverage, rather than keeping the data in-house.
At this stage, the reporting does not name specific CVE IDs, affected product versions, or indicators of compromise, so defenders should treat attribution and victimology as the actionable takeaways rather than hunting for a single patch. Organizations in the listed sectors, particularly those with regional operations in Southeast Asia, should review email infrastructure exposure, audit for unauthorized access to mail systems, and monitor for scanning activity against public-facing web properties.
- Review internet-facing websites and web applications for exploitation attempts
- Audit mail systems and identity logs for unauthorized access or forwarding rules
- Watch for scanning activity consistent with vulnerability discovery tools
- Escalate findings involving government, law enforcement, healthcare, or religious sector tenants
Source: The Hacker News
Does your organization have visibility into scanning activity against its public-facing web assets, and how are you prioritizing mailbox audits in response?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login