Companies that choose to outsource their IT operations should be careful. Suspected Chinese hackers have been hitting businesses by breaching their third-party IT service providers.
Major IT suppliers that specialise in cloud storage, help desk, and application management have become a top target for the hacking group known as APT10, security providers BAE Systems and PwC said in a joint report.
That is because these suppliers often have direct access to their client’s networks. APT10 has been found stealing intellectual property as part of a global cyberespionage campaign that ramped up last year, PwC said on Monday.
The joint report does not identify which IT service providers were hit or how many were found breached. But the providers included several suppliers in enterprise services and cloud hosting.
Numbers unknown
“It is impossible to say how many organisations might be impacted altogether at this point,” BAE Systems said in a blog post.
APT10 has been around since at least 2009 and is believed to be based in China, according to security researchers. To kick off their attacks, the hackers have used spear-phishing email schemes to trick their victims into installing malware, either through an attachment or through a link that leads to a malicious site.
From there, APT10 will try to steal the credentials from the IT service provider to hop over to their clients’ private networks. The hackers will then move on to intellectual property theft, by using the IT service provider’s own infrastructure to secretly exfiltrate the data.
APT10’s hacking campaign has continued into this year. The group has targeted a whole range of industries across the globe including retail, energy, technology, and the public sector.
Security warning
The UK’s National Cyber Security Centre has warned the public about the hacking campaign.
“This incident should remind organisations that entire supply chains need to be managed, and they cannot outsource their risk,” it said in a statement.
Businesses should talk with IT service providers about how they protect access to their data and demand any changes needed, the UK centre recommended.
IDG news Service
Subscribers 0
Fans 0
Followers 0
Followers