← Spy Craft
Spy Craft
The Silent Invasion: Inside China's Cyber War on US Defense Research
00:04:42
In this episode, we break down a chilling new report from Google’s Threat Intelligence Group exposing a highly sophisticated, multi-year cyber espionage operation known as UNC6508. Backed by the Chinese state, this threat actor successfully...
Loading summary
Transcript5 lines
- [00:00]
A
What's up everybody?
- [00:01]
B
It's Bretzky and America is turning 250 and I can't think of a better way to celebrate that than playing on an American owned social casino. Spinquest.com with all of your favorite games, live crabs, bubble craps, live blackjack, there's no better place to play for free and win real cash prizes. Spinquest.com Spinquest is a free to play social casino void where prohibited. Visit spinquest.com for more details.
- [00:32]
A
Welcome back everybody. Today we're going to be looking at inside China's Cyber War and U.S. defense Research. If you've been watching the world lately, you know the nature of warfare has completely shifted. It's not just about boots on the ground. It's not just about who has the biggest carrier strikes or the quietest submarines. The most dangerous battles being fought right now are helping are happening in silence. They're happening on servers, data centers and the networks of our most sensitive institutions. And most Americans have absolutely no idea we are actively losing a digital war. Google's Threat Intelligence group dropped a bombshell report that exposed a massive multi year cyber espionage campaign orchestrated by a highly sophisticated threat actor known as UNC 6508, a China nexus state sponsored hacker group. China cyber soldiers working directly for the People's Republic of China. And what they pulled off should scare the heck out of every single one of us. These folks didn't target random infrastructure. They went after the crown jewels. They targeted North American medical, academic and military research institutions. The place is developing the next gen of American tech medical breakthroughs in US Defense. I know you're asking how did they get in? They found a weak point in an externally facing platform called redcap. For those who don't know, Redcap stands for Research Electronic Data Capture. It's a secure web application used by scientists, military researchers and doctors to build and manage online databases. It's exactly where you store highly classified, highly sensitive data when you're running advanced trials. UNC 6508 found a way to crack those servers open. And once they got inside, they didn't just smash and grab. That's not how these elite state actors operate. They play the long game. They deployed a highly customized piece of malware called Infiniturd. Think of Infiniturd as a digital ghost. It's a customer built, custom built tool designed for one specific purpose. To sit quietly in the shadows of a network, harvest credentials, steal usernames and passwords, and maintain what the tech world calls persistence. They stayed hidden inside some of these environments for over a year. Think about that for a second. For 12 plus months, Chinese intelligence operators had a backdoor key to American military and medical research networks. They were sitting in the room, virtually reading over the shoulders of our top scientists and defense strategists. So what are they looking for? Everything that matters for the next 50 years of global dominance. They exfiltrated massive troves of data on advanced medical research. They stole U.S. defense strategy documents. They targeted advanced technology, cutting edge artificial intelligence. And this is the part that really hits home. Autonomous and uncrewed systems. Drone technology, robotic warfare. The exact tech that our guys are going to rely on in the field to stay alive. If you want to defeat America In a conflict 10 years from now, you don't want to wait for the war to start. You steal the blueprints while they're still being written. If you want to defeat the soccer team in the World cup before, you don't want to wait for them to start implementing their strategy. You want to know what it is beforehand, if you can. But the technical sophistication didn't stop at the malware. The Google threat hunters discovered that these guys were using incredibly novel techniques to get the data out of our house and into theirs. They actually manipulated Google workspace compliance rules. Think about how brilliant this is. They didn't use some loud, aggressive file transfer protocol that would trigger an alarm that quietly altered the internal administrative rules of the victim organization's own Google system. It made the system itself bypass its own security checks, treating the data theft like a routine, compliant, automated task. By the time security teams realized what was happening, the data was already gone. Fortunately, Google's threat intelligence group caught on to this. They acted, they disrupted the infrastructure of the UNC 6508 was using to run these operations. And they've been burning the men out of oil, notifying the affected organizations to help them patch the holes and kick these ghosts out. But who is this? But who else is there? Who else is in there right now that we haven't caught? That's the real question. This is not an isolated incident. This is a highly coordinated, incredibly well funded, asymmetrical war being waged against the US. While we're distracted by the news nonsense and the politics, our adversaries are systematically draining our intellectual property and dismantling our tech edge. If we don't start taking cyber security as seriously as we take kinetic warfare, we're going to wake up one day and realize we lost the war before a shot was never fired. Stay safe out there, everyone, and stay vigilant.
- [05:12]
B
Happy birthday, America. It's time to celebrate and play your favorite Las Vegas casino games by American owned spinquest.com what's better than fireworks and American Pie? Hitting a blackjack in the palm of your hand and you won't lose your fingers. Over a thousand games, including slots and live dealers and $30 coin packs, are on sale for 10 spinquest.com buy American players for American players, Spin Quest is a free to play social casino void where prohibited. Visit spinquest.com for more details.
- [05:43]
C
Grainger KNOWS when you're a procurement manager for an office park, you're not managing one building, you're managing all of them. And to stay ahead, you need to see through walls and around corners. Lights about to fail, filters ready to clog HVAC on its last leg. If you wait until something breaks, you're already behind. Count on Grainger for quality products, easy reordering and 24. 7 support. Call 1-800-GRAINGER click grainger.com or just stop by Grainger for the ones who get it done.