It has been revealed that starting in late 2023 and into early this year, a Chinese-linked hacker group breached the not-for-profit organization MITRE. According to SecurityWeek, MITRE was working with the U.S. government in the field of operating research & development centers. Through a zero-day attack, approximately 100,000 users were compromised including members of the government’s Cybersecurity and Infrastructure Security Agency (abbreviated as CISA.) These attacks took place from December of 2023 and continued into March of this year, but were only discovered by MITRE last month. What we have learned thanks to a cybersecurity firm and subsidiary of Google named Mandiant, is that the responsible party is a “China-nexus espionage threat actor.” MITRE has now made available technical details for each piece of malware involved in the attack.
Stay tuned to The Nyedis Anarchy Series for further details as they become available.