new joint advisory <\/a>the National Cyber Security Centre \u2013 a part of GCHQ \u2013 alongside international partners highlight how recent activity has targeted networks across critical infrastructure sectors in the US and how the same techniques could be applied worldwide.<\/p>\n\n\n\nThe actor has been observed taking advantage of built-in network administration tools on targets\u2019 systems to evade detection after an initial compromise.<\/p>\n\n\n\n
The advisory provides technical indicators of compromise and examples of techniques deployed by the actor to help network defenders identify the malicious activity.<\/p>\n\n\n\n
Paul Chichester, NCSC Director of Operations, said: \u201cIt is vital that operators of critical national infrastructure take action to prevent attackers hiding on their systems, as described in this joint advisory with our international partners.<\/p>\n\n\n\n
\u201cWe strongly encourage providers of UK essential services to follow our guidance to help detect this malicious activity and prevent persistent compromise.\u201d<\/p>\n\n\n\n
Sylvain Cortes, VP Strategy at Hackuity, commented: “<\/em>Persistent threat actors such as \u2018Volt Typhoon\u2019, which have been acting against critical national infrastructure since 2021 according to Microsoft, thrive on the exploitation of zero-day vulnerabilities and the lack of knowledge around them.<\/p>\n\n\n\n“There are a variety of reasons for nation-state driven attacks such as \u2018Volt Typhoon\u2019, but mainly their attacks are designed to cause minimum noise and maximum disruption, until it\u2019s too late and an attack is fully underway.<\/p>\n\n\n\n
“To maximise preventative measures, organisations must develop a routine of vulnerability scanning to stay one step ahead of attackers. What\u2019s more, running standard audits of your internal system to locate critical access points in a timely manner will increase your chances of spotting unusual activity among your users.”<\/p>\n","protected":false},"excerpt":{"rendered":"
The UK and agencies in the US, Australia, Canada and New Zealand have issued new advice to help organisations detect China state-sponsored activity being carried out against critical national infrastructure networks. In the new joint advisory the National Cyber Security Centre \u2013 a part of GCHQ \u2013 alongside international partners highlight how recent activity has targeted networks […]<\/p>\n","protected":false},"author":21,"featured_media":27282,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1463,3559,18,22,1659,53,44,54],"tags":[1652,3462,4468,4469,4470,4471],"class_list":["post-26943","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apac","category-cybersecurity","category-enterprise-security","category-industry-verticals-government","category-north-america","category-regional-news-newsletter","category-top-stories","category-used","tag-critical-infrastructure","tag-gchq","tag-hackuity","tag-national-cyber-security-centre","tag-paul-chichester","tag-sylvain-cortes"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/26943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/comments?post=26943"}],"version-history":[{"count":3,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/26943\/revisions"}],"predecessor-version":[{"id":27319,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/posts\/26943\/revisions\/27319"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/media\/27282"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/media?parent=26943"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/categories?post=26943"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/apac\/wp-json\/wp\/v2\/tags?post=26943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}