KnowBe4 - Chinese Cyber Spies Focus On Spear Phishing... YOU!

Catalin Cimpanu at Bleepingcomputer reported: "Chinese cyber spies are evolving their tactics, focusing on IT staffers, relying more and more on spear phishing instead of malware, and gathering code signing certificates from hacked software companies in the preparation of future supply-chain attacks.

These are some of the main points of a 45-page report [HTML, PDF] released yesterday by 401TRG, the Threat Research & Analysis Team at ProtectWise.

Experts analyzed the TTPs (tactics, techniques, and procedures) used across the years by a group previously referred to as Winnti, after the name of one of its main tools, the Winnti backdoor.

from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/chinese-cyber-spies-focus-on-spear-phishing...-you