China seen targeting banks, military in Forbes Web attack

Flash and Internet Explorer vulnerabilities were used in targeted attack, say security companies

A Chinese hacking group infiltrated the Forbes.com site in November and used it to launch targeted attacks against website visitors from US. banking and defense companies, according to a cybersecurity company.

The attack took place over a period of several days, starting Nov. 28, and took advantage of unpatched vulnerabilities in Adobe Flash and Microsoft Internet Explorer 9, according to ISight Partners. The vulnerability was kept quiet until Tuesday, when Microsoft issued a patch to plug the security hole in its web browser. Adobe had previously published a patch for Flash.

The attack used a Flash vulnerability and was launched from the "Thought of the day" Flash widget that appears when people first visit the financial magazine's site, said Invincea, a second cybersecurity company that independently detected the attack.

ISight said the attack has the fingerprints of a Chinese hacking group known by security researchers as either Codoso or Sunshop Group. It said technical indicators in the malware as well as use of the same undisclosed vulnerabilities as used in other hacks by Chinese groups led to this conclusion.

Among ISight's evidence: some of the malware code was written in simplified Chinese, used in mainland China, and it bore a resemblance to the "Derusbi" malware that is unique to Chinese hackers. The command system for the malware relied on an Internet domain previously used in Chinese hacks and pointed to web pages that had been used in Chinese attacks in the past.

The group has been active since at least 2010 and targets companies in the defense, finance and energy industries, governments, political dissidents and think tanks, said ISight.

The company said previous hacks by the group have included an attack on the website of the Norwegian Nobel Peace Prize committee in 2010, a spear-phishing attack against government users in 2011 and an attack on websites related to the Uyghur minority in China in 2013.

Martyn Williams covers mobile telecoms, Silicon Valley and general technology breaking news for The IDG News Service. Follow Martyn on Twitter at @martyn_williams. Martyn's e-mail address is martyn_williams@idg.com

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags patchesintrusioniSight PartnerssecurityInvinciamalware

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Martyn Williams

IDG News Service
Show Comments

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?