APT1: Exposing One of China's Cyber Espionage Units

This video shows actual attacker sessions and intrusion activities conducted by one specific Advanced Persistent Threat (APT) group, which Mandiant has named APT1. This group has systematically stolen confidential data from at least 141 organizations across multiple industries. A full report, published by Mandiant, details APT1's multi-year cyber espionage campaign and is available at www.mandiant.com/apt1.

Correction: At :44 in the video, the narrator states the phone number is 159 2193 7729. However, as the video shows, the true phone number is 159 2193 7229.

• Category

  News & Politics

[heshhh88]

I have no idea whats going on and it terrifies me

[sylvafeyth]

Quite simply... they hacked him. Probably baited him/her into downloading content, on an already compromised machine, that was seemingly promising but was in fact a "backdoor" they could use to compromise his system. Once that happens they can eventually gain control of his system to include viewing his login session. Which is what they were doing in that video...

[Big Elmo]

If you are interested in Cyber Security, join the facebook page

facebook /pages/Global-Cyber-Security-N­etwork/568770576496102

They have really good cyber security articles!

[clickandtreatpets]

So he uses a chinese mobile number to verify his account...mistake #1.

[binaryD3struct0r]

Question 1: How did you guys identify the points of compromise (the hops) indicated in the report and obtain the IP addresses to which you traced to the Pudong New area in Shanghai?

Question 2: How did you guys access the Gmail inbox of the hacker you identified as DOTA (pg 57)?

I do not see these details included in the report.

[appelflapify]

thats dumb, if you dont know whats going on you dont know what to fear or not to fear...

[VOODOOphg]

what do you want me to say?... :)

------

I want you to admit that you have absolutely no evidence that China **IS NOT** hacking American companies and transferring American technology to Govt. owned "private" industry in China. This report as well as hundreds of other show evidence of the Chinese Govt. being directly involved in the hacking attacks. Admit that the Chinese Govt. *IS* involved in corporate espionage on a massive scale.

[hahahaffffffffff]

US can point their fingers on any countries, actually it's not because US is always correct and other countries are always wrong. The reason is obvious: US is the only superpower in the world. US invaded Iraq with the excuse of nuclear weapons in Iraq, and it turned out there isn't any at all. Did US ever apologize? I just wish US won't use Mandiant's report as an excuse to invade China...

[hahahaffffffffff]

If you looked back into last 2 decades, among almost all of the wars in the world, Libya, Iraq, Kosovo, Afganistan, Syria, etc, there was the US goverment. Just think about why?... you might ask, why didn't Kosovo invaded the US? why didn't Iraq invaded the US? ... interesting question. Everyone knows that US the only superpower in the world, they can attack any countries they want to attack. But how can a small country attack US? They can not. It's the same in Cybercrime area.