Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator
Brief
An alleged Chinese-speaking actor breached Philippine nuclear and naval targets by exploiting known flaws, stealing sensitive data.
A suspected Chinese-speaking operator targeted a Philippine nuclear research body and a marine engineering company that supports the Philippine Navy, using well-known vulnerabilities in internet-facing ownCloud and WordPress systems. The activity was uncovered after Hunt. io found an exposed server in Amsterdam that contained attack scripts, logs, offensive tooling and data taken from the two organisations.
“Hunt. io Attack Capture discovered an open directory containing tooling which documented intrusion activity against two Philippine organizations.” reads the report published by Hunt. io.