China-linked groups are using stealthy malware to hack software suppliers

Highly sophisticated hackers linked to the Chinese government are breaking into technology companies, software-as-a-service providers and legal-services firms with stealthy malware that has allowed them to quietly steal sensitive data from those companies and their customers, Google announced on Wednesday.

The hackers have pivoted from service providers to their customers’ networks, searched the emails of specific people inside legal firms and hunted for information about U.S. national security and international trade matters, according to Google.

The threat actors have also stolen the source code for widely used enterprise technologies, likely as part of an effort to analyze them for undisclosed vulnerabilities that could power future attacks, Google said. In some breaches of enterprise tech vendors, they have searched the email inboxes of software developers for information about product flaws.

Read more at Cybersecurity Dive