China-linked Silk Typhoon APT targets North America

The China-linked Silk Typhoon APT group, also known as Murky Panda, has intensified its cyberattacks on North America, exploiting both n-day and zero-day vulnerabilities to gain system access. Active since 2020, the group targets various sectors including IT services, healthcare, and government, utilizing web shells for command execution and data theft. They demonstrate advanced knowledge of cloud environments, allowing for lateral movement and data exfiltration.

Recent tactics include exploiting trusted cloud relationships to maintain covert access and using custom malware like CloudedHope. The report by CrowdStrike highlights the significant threat posed by this group to sensitive information across multiple industries.