Global telcos under attack, state-sponsored groups in the limelight
.jpg)
A number of global telecommunications companies have been breached, and their data stolen, according to fresh media reports. Even though we still don't know who the culprits are, fingers are already being pointed, and they're being pointed to the Chinese.
According to Cybereason (an US-Israeli cybersecurity firm), the group known as APT10 (also known as Stone Panda, among other names it uses) is behind the attack. APT10 is a known cyberwarfare group that many researchers believe is state-backed or state-sponsored.
It stole personal and corporate data from telecommunications companies in western Europe, allegedly.
“For this level of sophistication, it’s not a criminal group. It is a government that has capabilities that can do this kind of attack,” said Lior Div, chief executive of Cybereason.
A spokesman for China’s Foreign Ministry said he was not aware of the report, but added: “we would never allow anyone to engage in such activities on Chinese soil or using Chinese infrastructure.”
The attack, which was apparently uncovered some nine months ago, compromised internal IT networks of its victims, allowing attackers customisation of the infrastructure.
They even managed to compromise the target’s entire active directory, giving themselves access to all login credentials in existence. Billing information, call records, these were all taken.
“They built a perfect espionage environment,” said Div, a former commander in Israel’s military intelligence unit 8200. “They could grab information as they please on the targets that they are interested in.”
Cybereason said: “This time as opposed to in the past we are sure enough to say that the attack originated in China. We managed to find not just one piece of software, we managed to find more than five different tools that this specific group used,” Div said.
source itproportal
Industry: Cyber Security
Latest Jobs
-
- Sailpoint IIQ Consultant
- London
- Up to £75,000
-
SailPoint IIQ consultant- London We are looking for a strong SailPoint IIQ consultant to work for this global enterprise, in this position you will be the lead consultant in regard to the IAM and PAM tools Duties include Responsible for designing, developing, testing, implementing, and integrating IAM (SailPoint) systems and solutions. Assessing requirements for Identity and Access Management solutions to meet stakeholders needs. Provide support for production IAM infrastructure systems and processes. Ensures the maintenance, patching, operating, and monitoring of IAM systems. Ensures senior management and staff are informed of any changes and updates in a timely manner. Experience with Maintaining and supporting SailPoint IIQ Assessing requirements for Privilege Access Management solutions to meet stakeholders needs We are looking for someone with the following experience SailPoint IIQ experience Expertise working with SailPoint Identity IQ platform - Access Lifecycle Management, Certifications, Role Management Expertise in onboarding applications with various connectors like Active Directory, JDBC, SCIM 2.0, Azure Active Directory Expertise in developing APIs (SCIM, REST) leveraging Java based developmentExperience of Privileged Access Management concepts and use cases Unfortunatly we are unable to provide sponsorship for this opportunity, therefore applications will need to be able to work in the UK
-
- SailPoint Consultant- Netherland-
- Netherlands
- upto €700 per day
-
We are looking for a highly skilled SailPoint IIQ Consultant to work on a major deployment project. The ideal candidate will have experience with all aspects of SailPoint IIQ, including development, configuration, and administration. They will also be able to work independently and as part of a team to deliver high-quality results. · Responsibilities · Develop and configure Sailpoint IIQ solutions · Integrate SailPoint IIQ with other systems · Support SailPoint IIQ deployments · Provide technical support to users If you are a highly skilled SailPoint IIQ consultant who is looking for their next project, we encourage you to apply. look forward to hearing from you!
-
- Lead CyberArk deployment Consultant
- London
- Upto £80,000 plus benefits
-
CyberArk Consultant is needed to be responsible for leading the deployment of CyberArk solutions for this expanding IT services business, You will work with customer both pre and post sales, getting involved in CyberArk Solution Design, helping to create CyberArk Strategic Roadmaps, on-boarding accounts, product and process integration into the CyberArk Solution and Proviso of Installation and technical Documentation. We are looking for this individual to have experience in: Installation of CyberArk PAS for V11.X and V12.X (Vault, DR Vault, Central Policy Manager and Password Vault Web Access) Upgrade of CyberArk from V9 and V10 (Vault, DR Vault, Central Policy Manager and Password Vault Web Access) Installation and Upgrade of Privilege Session Manager and Privilege Session Manager Proxy As some of your client will be government site, all individual will need to be put through SC clearance, therefore you must be eligible to receive this and happy to be put through(With a British Citizen or to have lived in the UK for the past 5 years) We are unable to provide work visa sponsorship for this opportunity
-
- Senior Business Analyst - Outside IR35 Contract, SC Clearance Required, London
- London
- £400 per day outside IR35
-
Senior Business Analyst - Outside IR35 Contract, SC Clearance Required, Based in London Project- to engage with colleagues and stakeholders to investigate and model business functions, processes, information flows and data structures, using a range of business analysis techniques. • You will translate the solution to the business problem into detailed requirements by creating user stories and well-defined acceptance criteria. • Elicit end-to-end business requirements for a live cross-government service • Working across the Government departments to bring together varied business and operational outcomes to form a holistic overall set of service requirements Current SC clearance is required. As is the ability to travel to London.