Friday, 24 March, 2023

In a three-year campaign, Chinese hackers exploit a "rarely seen" Windows mechanism

<p>Cybereason has revealed a sophisticated Winnti cyber campaign that exploits Windows mechanisms in a &#39;rarely seen&#39; manner. The covert attacks have primarily targeted the networks of technology and manufacturing firms in Europe, Asia, and North America in order to steal sensitive proprietary information. Winnti is an APT that exploits the Common Log File System Stashlog, which manipulates the NTFS and Transactional Registry operations of CLFS.<br /> &nbsp;</p>