Advancing UK Aerospace, Defence, Security & Space Solutions Worldwide
  • Home
  • /
  • Security
  • /
  • NCSC and partners issue alert about China state-sponsored cyber attacks

Security

NCSC and partners issue alert about China state-sponsored cyber attacks

The UK and international allies have issued a new alert which shines a light on how China state-sponsored actors have evolved their techniques for launching cyber attacks.

Above: The National Cyber Security Centre (NCSC), Nova South, London.
Image by Simona Flamigni / copyright Shutterstock

The National Cyber Security Centre – a part of GCHQ – has issued an advisory alongside partners in Australia, the US, Canada, New Zealand, Germany, the Republic of Korea and Japan, focusing on how one China state-sponsored cyber actor has carried out attacks against Australian networks.

Advertisement
ADS S&P RT

The threat group APT40 has embraced the trend of exploiting vulnerable small-office and home-office (SoHo) devices as a launching pad for attacks. These devices are softer targets when they are not running the latest software, or are no longer supported with security updates and they more easily conceal malicious traffic.

Two technical case studies showing how these techniques are deployed have been shared to help network defenders identify this malicious activity, which is also used regularly worldwide – including by other China state-sponsored actors.

The UK has previously attributed APT40 as being part of the Chinese Ministry of State Security. Defenders are encouraged to follow the latest advice to help detect and mitigate the malicious activity.

Advertisement
ADS S&P RT

The publication of this advisory follows a warning made by the Director of GCHQ in May about the “genuine and increasing cyber risk to the UK” posed by China.   

The advisory, titled 'PRC MSS tradecraft in action', has been co-sealed by the NCSC, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), the US Cybersecurity and Infrastructure Security Agency (CISA), the US National Security Agency (NSA), the US Federal Bureau of Investigation (FBI), the Canadian Cyber Security Centre (CCCS), the New Zealand National Cyber Security Centre (NCSC-NZ), the German Federal Intelligence Service (BND), the Republic of Korea’s National Intelligence Service (NIS) and NIS’ National Cyber Security Center, and Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and National Police Agency (NPA).

It can be read on the ACSC website.

Advertisement
Babcock LB
HMP Highpoint expanded to create UK

Security

HMP Highpoint expanded to create UK's largest public sector jail

10 March 2025

More dangerous criminals will be taken off the streets thanks to a 700-place expansion which will turn a Suffolk jail into the UK’s largest public sector prison.

AAUK relaunches APPGAA for Air Ambulances

Aerospace Security

AAUK relaunches APPGAA for Air Ambulances

7 March 2025

Air Ambulances UK (AAUK) has relaunched the All-Party Parliamentary Group on Air Ambulances (APPGAA), reaffirming its commitment to advocating for the lifesaving work of air ambulance charities across the UK.

Blighter hosting overseas delegations at Security & Policing

Security Events

Blighter hosting overseas delegations at Security & Policing

7 March 2025

Blighter will be hosting delegations from Estonia, Iraq, Latvia and Lithuania at this year’s Security & Policing (S&P) exhibition - the global security event organised by the UK Government - taking place at the Farnborough International Exhibition and Conference Centre, 11th to 13th March 2025.

Schiebel selected for UK police trials

Security

Schiebel selected for UK police trials

6 March 2025

The National Police Air Service (NPAS) has selected global manufacturer Schiebel to support its most ambitious trial so far of ‘Beyond the Visual Line of Sight’ (BVLOS) uncrewed aircraft operations.

Advertisement
ODU RT
D-Fend Solutions opens London office

Security

D-Fend Solutions opens London office

6 March 2025

D-Fend Solutions today announced the expansion of its global operations with the launch of a new UK entity, D-Fend Solutions AD UK Ltd. and the opening of a new office in London.

SPX Communication Technologies showcasing capabilities at Security & Policing 2025

Defence Security Events

SPX Communication Technologies showcasing capabilities at Security & Policing 2025

6 March 2025

SPX Communication Technologies, formed by TCI and ECS, will be showcasing its Data Links, COMINT and Counter-UAS capabilities and solutions at this year's Home Office Security & Policing Global Security Event, being held at the Farnborough International Exhibition and Conference Centre, 11th-13th March 2025.

Advertisement
ADS S&P RT