Read at Nextgov.com
The Cybersecurity and Infrastructure Security Agency has issued an advisory warning that China-linked hackers have been operating inside certain U.S. systems for at least five years and are preparing to carry out cyberattacks on critical infrastructure. The FBI recently announced an operation that disrupted the China-linked hacking campaign.
Our evidence strongly suggests that the PRC actors are pre-positioning to launch future disruptive or destructive cyberattacks that could cause impact to national security, economic security, or public health and safety.
The hackers have been using 'living off the land techniques', allowing them to hide inside systems and bypass detection. They have breached American facilities in Guam and other key infrastructure both inside and outside the U.S. The FBI operation targeted home internet routers in southern Texas and other undisclosed locations.
The notice was published in conjunction with other Western intelligence partners, including Australia and Canada.