Five things to know:
1. The alleged two hackers, LI Xiaoyu and Dong Jiazhi, worked for the Guangdong State Security Department in China and targeted high-tech manufacturing, medical device, pharmaceutical and engineering industries in a 10-year effort, according to the indictment.
2. The hackers most recently were investigating computer network vulnerabilities in companies developing COVID-19 vaccines, testing technology and treatments, the indictment states.
3. The hackers are operating from China and accessed victims’ networks through publicly known software vulnerabilities in web server software, web application development suites and software collaboration programs before users could install patches, according to the indictment.
4. After gaining access to the victims’ networks, the hackers installed malicious web shell programs and credential-stealing software so they could make commands on the computer system remotely, according to the charges against them. They packaged the victim data in encrypted Roshal Archive Compressed files and changed the file and document names and extensions as well as system timestamps to conceal their activity, the indictment alleges. They also stored their programs in innocuous locations, such as the computer’s recycle bins, according to the indictment.
5. The hackers are charged with 11 counts, including conspiracy to commit computer fraud, theft of trade secrets, wire fraud and aggravated identity theft.
More articles on cybersecurity:
Information security startups attract investments amid spike in cyberattacks
Microsoft’s most critical vulnerabilities in the past 6 months
California health plan email hack exposed info of nearly 36,000 members
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
