Hackers operating in the interest of the Chinese government systematically target critical systems while remaining undetected for nearly a decade.
In April 2020, BlackBerry researchers detailed the operation of five related Advanced Persistent Threat (APT) groups “operating in the interest of the Chinese government” targeted Linux servers, Windows systems and Android mobile devices while remaining undetected for nearly a decade. The targeting of Linux systems was particularly noteworthy because the platform “runs nearly all of the top 1 million websites online, 75% of all web servers, 98% of the world’s supercomputers and 75% of major cloud service providers.” The researchers highlighted that a key factor behind the operation’s success was the fact that the five APT groups were composed of Chinese civilian sub-contractors who worked collaboratively among themselves, as well as with their government counterparts. BlackBerry tied the launch of the report to the U.S. Department of Justice’s announcement of “several high-profile indictments from over 1,000 open FBI investigations into economic espionage.”
