{"id":57822,"date":"2024-12-06T01:03:12","date_gmt":"2024-12-06T01:03:12","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/microsoft-another-chinese-cyberspy-crew-targeting-us-critical-orgs-as-of-yesterday\/"},"modified":"2024-12-06T01:03:12","modified_gmt":"2024-12-06T01:03:12","slug":"microsoft-another-chinese-cyberspy-crew-targeting-us-critical-orgs-as-of-yesterday","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-another-chinese-cyberspy-crew-targeting-us-critical-orgs-as-of-yesterday\/","title":{"rendered":"Microsoft: Another Chinese cyberspy crew targeting US critical orgs ‘as of yesterday’"},"content":{"rendered":"

A Chinese government-linked group that Microsoft tracks as Storm-0227 yesterday started targeting critical infrastructures organisations and US government agencies, according to Redmond’s threat intel team.<\/p>\n

The crew has been active since at least January, and while Microsoft declined to enumerate Storm-0227’s victim count, “there are indicators that this group is active as of yesterday, actively pursuing threat activity,” Sherrod DeGrippo, director of threat intelligence strategy, told The Register<\/em>.<\/p>\n

The espionage crew shares some overlap with Silk Typhoon<\/a> operatives (aka Hafnium<\/a>), and other illicit activity that other vendors track as TAG-100<\/a>. Over the last 12 months, the Chinese spies mostly focused on US targets in the defense industrial base, aviation, telecommunications, financial and legal services industries, plus government and non-governmental agencies.<\/p>\n