Tuesday, August 13, 2013

Published 9:11 AM by

Chinese pro-government hackers have renewed the attack

Chinese pro-government hackers have renewed the attack

 IT company FireEye today announced that the Chinese hacker group, which conducted the earlier invasion of the servers publishing The New York Times, as well as a number of defense companies, has launched a new wave of attacks, although a few months from hackers nothing was heard. A group of hackers known as APT12 (Advanced Persistent Threat number 12) is believed to be linked to the People's Liberation Army of China. FireEye The blog said that APT 12 back after a lull of several months and is now beginning to use new methods and strategies of attacks, which are different from the January attack on The New York Times.

"We saw the resumption of the activity of this group at the beginning of May 2013. We are pretty sure that some of the new attacks - this is the action of the same group," - says Ned Moran, a senior malware analyst at FireEye. New attacks using new variants of malicious Backdoor. APT.Aumlib and Backdoor.APT.lxeshe. Previously, the old version of the data Trojans also used APT 12.

The new version Aumlib used to attack organizations that are focused on the financial sector and economic policy, while the second is used for malicious attacks aimed at Taiwan. Individual victims of attacks in FirEye not known. antivirus companies say that APT 12 changed the configuration of communications systems and sets of attacks to establish a link with the previous attacks were more difficult.
      edit