Foreign hacker organizations launch cyberattacks against China

A number of foreign hacker organizations have been utilizing malicious websites and overseas IP addresses to execute cyberattacks targeting China and other nations, according to China's national cybersecurity and information security information center on Monday. 

These malicious websites and IPs are linked to specific Trojan programs or their control endpoints. 

The types of cyberattacks include establishing botnets, phishing, stealing trade secrets and intellectual property, and infringing on citizens' personal information, presenting a serious risk to domestic networks and internet users in China. 

Some of these activities are suspected to constitute criminal offenses, the center said.

The locations of the relevant malicious websites and IPs mainly involve the US, the Netherlands, Singapore, Turkey, Mexico, Vietnam, and others, according to the center.

Of the seven listed malicious websites and IP addresses, two were traced to Los Angeles. Both were using DDoS botnet Trojan spreads through N-Day vulnerabilities and weak Telnet/SSH passwords. Attackers can control infected devices to launch DDoS attacks on other systems, crippling critical infrastructure and disrupting public order, according to the statement. 

The center recommended maintaining heightened vigilance toward all documents and links received through social media platforms or email channels, with a particular focus on situations where the source is unknown or untrustworthy. Avoid trusting or opening such files without verification.

Timely updates to threat intelligence products or network security devices are essential to block access to the identified malicious websites and IP addresses, and also promptly report to relevant authorities and cooperate in conducting on-site investigations and technical tracing, the center said.