Advancing UK Aerospace, Defence, Security & Space Solutions Worldwide
  • Home
  • /
  • Security
  • /
  • NCSC and partners issue alert about China state-sponsored cyber attacks

Security

NCSC and partners issue alert about China state-sponsored cyber attacks

The UK and international allies have issued a new alert which shines a light on how China state-sponsored actors have evolved their techniques for launching cyber attacks.

Above: The National Cyber Security Centre (NCSC), Nova South, London.
Image by Simona Flamigni / copyright Shutterstock

The National Cyber Security Centre – a part of GCHQ – has issued an advisory alongside partners in Australia, the US, Canada, New Zealand, Germany, the Republic of Korea and Japan, focusing on how one China state-sponsored cyber actor has carried out attacks against Australian networks.

Advertisement
ODU RT

The threat group APT40 has embraced the trend of exploiting vulnerable small-office and home-office (SoHo) devices as a launching pad for attacks. These devices are softer targets when they are not running the latest software, or are no longer supported with security updates and they more easily conceal malicious traffic.

Two technical case studies showing how these techniques are deployed have been shared to help network defenders identify this malicious activity, which is also used regularly worldwide – including by other China state-sponsored actors.

The UK has previously attributed APT40 as being part of the Chinese Ministry of State Security. Defenders are encouraged to follow the latest advice to help detect and mitigate the malicious activity.

Advertisement
Teledyne

The publication of this advisory follows a warning made by the Director of GCHQ in May about the “genuine and increasing cyber risk to the UK” posed by China.   

The advisory, titled 'PRC MSS tradecraft in action', has been co-sealed by the NCSC, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), the US Cybersecurity and Infrastructure Security Agency (CISA), the US National Security Agency (NSA), the US Federal Bureau of Investigation (FBI), the Canadian Cyber Security Centre (CCCS), the New Zealand National Cyber Security Centre (NCSC-NZ), the German Federal Intelligence Service (BND), the Republic of Korea’s National Intelligence Service (NIS) and NIS’ National Cyber Security Center, and Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and National Police Agency (NPA).

It can be read on the ACSC website.

Advertisement
PTC PTC
Drones and AI help protect seals in Norfolk

Aerospace Security

Drones and AI help protect seals in Norfolk

28 February 2025

The two-year project has used drone technology combined with Artificial Intelligence (AI) to monitor seal populations and their pups off the coast of Norfolk.

Kahootz secures contract extension with MoD

Defence Security

Kahootz secures contract extension with MoD

27 February 2025

British provider of secure online collaboration platforms, Kahootz, has today announced that the Ministry of Defence (MoD) will extend its existing contract, ensuring its continued use of the Defence Share platform.

Police given new powers to tackle crime

Security

Police given new powers to tackle crime

26 February 2025

In one of the biggest legislative updates to policing for decades, a package of new laws following the introduction of the Crime and Policing Bill, will tackle antisocial behaviour, shop theft and street crime.

Thales launches cortAIx in the UK

Defence Security

Thales launches cortAIx in the UK

25 February 2025

Thales has launched cortAIx in the UK to address defence and security domains, which with 200 new highly skilled AI and data specialists, aims to support the UK Government’s vision for AI-driven growth.

Advertisement
ADS S&P RT
Remembering Dame Julie Kenny DBE DL

Home Security

Remembering Dame Julie Kenny DBE DL

24 February 2025

It is with deep regret that ADS shares the passing of Dame Julie Kenny DBE DL, Chair of the UK Security and Resilience Industry Suppliers Community (RISC).

Security system trials launched at Winfrith

Defence Security

Security system trials launched at Winfrith

21 February 2025

The trials of four innovative new security systems have been successfully launched at Winfrith, the former nuclear reactor test site in Dorset.

Advertisement
ODU RT