Sophos Reveals Five-Year Battle Against China's 'Evasive Panda' APT in Cloud Hijacking with Surveillance Implants from Chengdu

Oct 31, 2024, 12:55 PM

Sophos has unveiled details of its extensive five-year battle against Chinese hackers, specifically a group known as 'Evasive Panda.' This advanced persistent threat (APT) has been linked to high-end cloud hijacking techniques. To combat these intrusions, Sophos resorted to innovative measures, including the installation of surveillance 'implants' on its own devices. These implants helped the company trace the hackers' activities back to a university and a contractor in Chengdu, China. Sophos's efforts have provided valuable insights into the research and development pipeline of intrusion techniques utilized by Chinese vulnerability developers, which are believed to support the Ministry of State Security (MSS) and the People’s Liberation Army (PLA).