{"id":8483,"date":"2024-10-31T14:13:43","date_gmt":"2024-10-31T13:13:43","guid":{"rendered":"https:\/\/partnernews.sophos.com\/en-us\/?p=8483"},"modified":"2024-10-31T14:13:43","modified_gmt":"2024-10-31T13:13:43","slug":"sophos-releases-pacific-rim-lifting-the-lid-off-a-vast-chinese-cyberespionage-operation","status":"publish","type":"post","link":"https:\/\/partnernews.sophos.com\/en-us\/2024\/10\/resources\/sophos-releases-pacific-rim-lifting-the-lid-off-a-vast-chinese-cyberespionage-operation\/","title":{"rendered":"Sophos Releases Pacific Rim \u2013 Lifting the Lid off a Vast Chinese Cyberespionage Operation"},"content":{"rendered":"

Today, Sophos has published an unprecedented industry report, called \u201cPacific Rim: Inside the Counter-Offensive\u2014The TTPs Used to Neutralize China-Based Threats,<\/span>\u201d about a five-year long battle with adversaries targeting perimeter devices, including Sophos firewalls. The overall report package includes how attackers can leverage any internet-facing perimeter device and Sophos\u2019 call to the entire cybersecurity ecosystem, including channel partners and Managed Security Partners (MSPs) to disrupt them<\/span><\/p>\n

Overview of Pacific Rim<\/h2>\n

In the research, we disclose how the attackers used a series of campaigns with novel exploits and customized malware to conduct surveillance, sabotage, and cyberespionage. Sophos also found overlapping tactics, tools, and procedures (TTPs) with well-known Chinese nation-state groups, including Volt Typhoon, APT31 and APT41. The adversaries targeted both small and<\/span> large critical infrastructure and government targets, primarily located in South and South-East Asia, including nuclear energy suppliers, a national capital\u2019s airport, a military hospital, state security apparatus, and central government ministries.<\/span><\/p>\n

Throughout Pacific Rim, Sophos X-Ops, our cybersecurity operations and threat intelligence unit, worked to neutralize the adversaries\u2019 moves and continuously evolved defenses and counter-offensives.<\/p>\n

After Sophos successfully responded to the initial attacks, the adversaries escalated their efforts and brought in more experienced operators. Sophos subsequently uncovered a vast adversarial ecosystem.<\/p>\n

Upcoming Pacific Rim Reports and Insights to Inspire Change<\/h2>\n

As a part of this announcement, we\u2019re publishing a series of articles to tell the story<\/a>:<\/p>\n