New Chinese Military Cyberattacks Discovered

New Chinese Military Cyberattacks Discovered

After the US announced criminal charges against five Chinese military officers from Unit 61398 just last month, a new Shanghai-based hacker unit with ties to the People’s Liberation Army (PLA) in China has been identified.

Hacker Profile

Name: Unit 61486, the 12th Bureau of the PLA’s 3rd General Staff Department

New Chinese Military Cyberattacks DiscoveredCode Name: “Putter Panda”

Targets: Golf-playing conference attendees; intelligence-gathering on US government sectors; and American, European and Japanese satellite, aerospace and communication companies.

Actions Taken: Use of emails containing job postings, PDF invitations to conferences and a yoga studio brochure to lure victims to download custom malware. (Remember, be careful what links you click within your email!)

Person(s) Identified: 35-year-old Chen Ping, known as “cpyy,” used to register domains for cyberattacks.

Putter Panda is believed to have been in operation since at least 2007 with evidence indicating that they cooperated or shared resources with Unit 61398. Investigation by security firm CrowdStrike found photo albums that could reveal military connections, forum discussions relating to security and “cpyy” interactions with a suspected member of Unit 61398.

According to CrowdStrike’s Adam Meyers, “We’ve got the gun, the bullet and the body.”

Some cybersecurity reports suggest that US companies should be allowed to retaliate against hackers, but I’m not so sure that is the best approach to combating cybercrimes.

Do you think companies should be allowed to freely retaliate? Why or why not?

About the Author

Ginger Hill is Group Social Media Manager.

Featured

New Products

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.