This blog has previously shown that by starting with an APT it is possible to identify the individuals and companies responsible for conducting their attacks and the State actors behind them. We have also shown that you can start with the State and work backwards to the APT.
APT groups in China have a common blueprint: contract hackers and specialists, front companies, and an intelligence officer. We know that multiple areas of China each have their own APT.
After a long investigation we now know that it is possible to take a province and identify front companies, from those companies identify individuals who work there, and then connect these companies and individuals to an APT and the State.
Hainan Province
Our previous research showed that science and technology companies Boyusec, Huaying Haitai, Antorsoft, and others were fronts for Chinese MSS-sponsored APT activity. If you take the blueprint above and search for it elsewhere, an interesting and increasingly bizarre series of links begin to emerge.
Northern China has received much, presumably unwelcome, attention from this blog already. For our next example, let’s look South, as far South as we can while remaining in China. Hainan – a semi-tropical island paradise conveniently located for Chinese tourists, known for its production of rubber and iron ore, its rocket launches, and its views over the South China Sea. What it is not internationally famous for, is global technology companies.
Hainan Xiandun Technology Development Company
Search for science and technology companies in Hainan who have also posted job adverts for penetration testers and you will quickly find 海南仙盾科技开发有限公司, the Hainan Xiandun Technology Development Company. A job advert for a penetration t ..
Support the originator by clicking the read the rest link below.
