Feds Crack Down on Pernicious Chinese Hacking Group that Targeted U.S. Gov’t, Dissidents

Hacker mugshots

The U.S. on Monday announced actions aimed at exposing a sweeping Chinese hacking campaign that has targeted U.S. government institutions, critical infrastructure, media and political dissidents for more than a decade.

Wuhan Xiaoruizhi Science and Technology Company, Limited (Wuhan XRZ), served as a front company for China’s Ministry of State Security (MSS), which deals with overseas policing and espionage, allowing Chinese hackers to hide a multitude of malicious cyber operations, the Treasury Department said after sanctioning the organization on Monday in a statement alongside other U.S. agencies and the United Kingdom. In an indictment unsealed separately, the Department of Justice accused Chinese nationals Zhao Guangzong, Ni Gaobin and five others for their role “in furtherance of [China’s] economic espionage and foreign intelligence objectives” over the past 14 years.

Read More

Commentary: Onshoring Semiconductor Capacity Is Crucial to National Security

semiconductor

When you think about national security, you probably don’t immediately think about semiconductors. These tiny chips are the “brains” enabling all the computational capabilities and data storage that we take for granted today. Chips power virtually every sector of the economy – including data centers, automotive, healthcare, banking, and agriculture. As a consequence of their widespread use, semiconductors have grown to become a $555 billion global industry, and are the world’s fourth most traded product. Semiconductor manufacturing and advanced packaging have been cited frequently as one of the main critical supply chain priorities for the nation.

A steady source of uninterrupted, trusted chips is necessary for the security of the nation – supporting the readiness of the U.S. military and protecting critical infrastructure like the electric grid. The problem is that most chips are fabricated outside of the U.S., in the vulnerable region of Southeast Asia – hence the security issues. Around three quarters of global chip production capacity comes from Southeast Asia.

Read More

FBI Now Warns of Missing Persons Scams on Social Media

There is a new type of cyber-enabled fraud that the Federal Bureau of Investigation is warning the public about – missing persons scams using social media. Scammers use information posted about missing persons on social media websites to target and exploit the victim’s family and friends network.

It is common for scammers to only request small amounts of money as missing persons scams tend to be a quick cash-grab. In addition to small requests, scammers tend to express some level of urgency in the payment by claiming the victim is either injured or sick.

Read More

Chinese-Backed Hackers Are Exploiting One of the ‘Most Pervasive’ Cybersecurity Flaws

Hackers backed by China are using a recently-discovered vulnerability in a common software tool to gain access to data and systems belonging to internet infrastructure companies.

The vulnerability, known as Log4Shell, was discovered by Chinese cybersecurity researchers from Alibaba last week and is found in an open-source software tool called Log4J used by enterprise software companies and cloud infrastructure providers. If exploited, the flaw allows hackers to gain access to a company’s data and internal networks.

Read More

Maricopa County Audit Results Reveal Someone Was Caught on Video Illegally Deleting Hundreds of Thousands of Election Files the Day Before the Audit Started

Arizona Senate Republicans issued the results of the independent ballot audit they conducted of the 2020 presidential and U.S. Senate election in Maricopa County on September 24 during a presentation, revealing findings that numerous election laws were broken and security measures breached. 

The most startling finding came from Ben Cotton, the founder of CyFIR. He said hundreds of thousands of election files — which the Maricopa County Supervisors refused to allow the auditors to examine — were deleted the day before the audit began, a violation of federal law which requires federal election records to be retained for 22 months. Although the name of the account that deleted them was not tied to a specific election worker, Cotton said there is video of the person who accessed those servers at that time. 

Read More

Few Americans Trust the Government to Keep Their Data Secure: Poll

Only a small minority of Americans say they trust the government to keep their online personal information safe, according to a new poll.

Just 23% of Americans say they are very or somewhat satisfied with the federal government’s efforts to keep their online data secure, according to the results of a poll released Thursday by the Associated Press-NORC Center for Public Affairs Research and MeriTalk. Almost 4 in 10 Americans say they are dissatisfied with the government’s efforts.

Read More

Chinese-Owned TikTok Overtakes YouTube in US

After former President Donald J. Trump attempted to ban TikTok, a popular video streaming social network, the Chinese-owned company has overtaken Google-owned YouTube in popularity in the United States.

“App users in the UK and US are spending more time on TikTok than on YouTube, a new report suggests,” BBC reported. “Data from app monitoring firm App Annie indicates that average time per user spent on the apps is higher for TikTok, indicating high levels of engagement.”

Read More

Hackers Steal over $600 Million in One of the Biggest Crypto-Heists Ever

Hackers stole over $600 million in digital assets Tuesday from users of cryptocurrency platform Poly Network in one of the largest digital token heists ever.

Poly Network, a decentralized finance (DeFi) platform that allows users to trade digital currencies with one another, announced the hack Tuesday. Cybersecurity firm SlowMist, which investigated the hack, said the total value of assets stolen was $610 million.

Read More