{"id":25020,"date":"2019-02-07T16:31:35","date_gmt":"2019-02-07T16:31:35","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29801\/Chinese-Cyberspies-Hacked-MSP-Retailer-And-Law-Firm-In-Economic-Espionage-Campaign.html"},"modified":"2019-02-07T16:31:35","modified_gmt":"2019-02-07T16:31:35","slug":"chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/","title":{"rendered":"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.scmagazine.com\/wp-content\/uploads\/sites\/4\/2018\/12\/supply-and-demand-small.jpg\" class=\"ff-og-image-inserted\"\/><\/div>\n<div class=\"wysiwyg\">\n<p>The Chinese state-sponsored threat actor <a href=\"https:\/\/www.scmagazine.com\/?s=APT10\">APT10<\/a> used stolen remote access software credentials to infiltrate the network of Norwegian managed services provider Visma last year, likely in an effort to launch secondary attacks against the MSP\u2019s clients.<\/p>\n<p>An investigation into the cyber espionage campaign revealed that APT10, aka Stone Panda, used similar tactics to invade the networks of at least two other companies\u00a0\u2013 an international apparel retailer and a U.S.-based law firm with a specialization in intellectual property law.<\/p>\n<p>Researchers with <a href=\"https:\/\/www.scmagazine.com\/?s=Recorded+Future\">Recorded Future\u2019s<\/a> Insikt Group as well as <a href=\"https:\/\/www.scmagazine.com\/?s=Rapid7\">Rapid7<\/a> divulged details of the plot today in a jointly authored <a href=\"https:\/\/www.recordedfuture.com\/apt10-cyberespionage-campaign\/\">blog post<\/a> and analysis report.<\/p>\n<p>The trio of organizations were separately attacked between November 2017 and September 2018. In all three cases, the malicious actors initially accessed the companies\u2019 networks using valid stolen passwords for either Citrix or LogMeIn. They then enumerated access and elevated their privilege before using DLL sideloading techniques (a common m.o. of APT10) to deliver malware.<\/p>\n<p>Visma was infected by a newly discovered version of the <a href=\"https:\/\/www.scmagazine.com\/?s=Trochilus+\">Trochilus remote access trojan<\/a>. Normally, the RAT encrypts its command-and-control communications using an RC4 stream cipher, but this latest version uses a combination of XOR, RC4 and Salsa20, the analysis explains. Meanwhile, the other two victimized networks were struck with a newly observed version of the <a href=\"https:\/\/www.scmagazine.com\/home\/security-news\/apt10-targets-japanese-media-company-with-upgraded-uppercut\/\">UPPERCUT<\/a>\u00a0(ANEL) backdoor malware program. Recorded Future and Rapid7 note that APT10 has a history of using Trochilus and UPPERCUT has been linked exclusively to the group.<\/p>\n<p>The hackers also used Mimikatz to conduct credential theft and exfiltrated key data from their victims via a Dropbox account, using the cURL for Windows command-line tool.<\/p>\n<p>Run by China\u2019s Ministry of State Security intelligence agency, APT10 is well known for attacking MSPs and their clients, particularly in a campaign launched in early 2017 called Operation Cloud Hopper.<\/p>\n<p>\u201cAccess to the networks of these third-party service providers grants the MSS the ability to potentially access the networks of hundreds, if not thousands, of corporations around the world,\u201d the blog post states. \u201cWe assess that APT10 likely compromised Visma with the primary goal of enabling secondary intrusions onto their client networks, and not of stealing Visma intellectual property.\u201d<\/p>\n<p>Just last December, the U.S. Department of Justice charged alleged MSS-sponsored hackers Zhu Hua and Zhang Shilong for multiple computer intrusions resulting in intellectual property theft.<\/p>\n<p>\u201cWe believe APT10 is the most significant Chinese state-sponsored cyber threat to global corporations known to date,\u201d the blog post declares.<\/p>\n<\/div>\n<section class=\"post-tags\">\n<h2>Topics:<\/h2>\n<p><a href=\"https:\/\/www.scmagazine.com\/tag\/apt\/\" class=\"button -secondary\">APT<\/a> <a href=\"https:\/\/www.scmagazine.com\/tag\/cyber-espionage\/\" class=\"button -secondary\">Cyber Espionage<\/a> <a href=\"https:\/\/www.scmagazine.com\/tag\/cybercrime\/\" class=\"button -secondary\">Cybercrime<\/a> <a href=\"https:\/\/www.scmagazine.com\/tag\/malware\/\" class=\"button -secondary\">Malware<\/a> <a href=\"https:\/\/www.scmagazine.com\/tag\/retail\/\" class=\"button -secondary\">Retail<\/a><\/section>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/29801\/Chinese-Cyberspies-Hacked-MSP-Retailer-And-Law-Firm-In-Economic-Espionage-Campaign.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":25021,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[5765],"class_list":["post-25020","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlinegovernmentchinacyberwarspyware"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-02-07T16:31:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"1375\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign\",\"datePublished\":\"2019-02-07T16:31:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/\"},\"wordCount\":431,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg\",\"keywords\":[\"headline,government,china,cyberwar,spyware\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/\",\"name\":\"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg\",\"datePublished\":\"2019-02-07T16:31:35+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg\",\"width\":2000,\"height\":1375},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,government,china,cyberwar,spyware\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinegovernmentchinacyberwarspyware\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/","og_locale":"en_US","og_type":"article","og_title":"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-02-07T16:31:35+00:00","og_image":[{"width":2000,"height":1375,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign","datePublished":"2019-02-07T16:31:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/"},"wordCount":431,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg","keywords":["headline,government,china,cyberwar,spyware"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/","url":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/","name":"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg","datePublished":"2019-02-07T16:31:35+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign.jpg","width":2000,"height":1375},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/chinese-cyberspies-hacked-msp-retailer-and-law-firm-in-economic-espionage-campaign\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,government,china,cyberwar,spyware","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinegovernmentchinacyberwarspyware\/"},{"@type":"ListItem","position":3,"name":"Chinese Cyberspies Hacked MSP, Retailer, And Law Firm In Economic Espionage Campaign"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/25020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=25020"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/25020\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/25021"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=25020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=25020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=25020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}