#APT27
LightNews LightNews
infosecsherpa.bsky.social
I make yummy Jalapeño-Onion Latkes with a horseradish sauce.

aptreats.medium.com/apt27-potato...
APT27: Potato Latkes
Fun at Chanukah or any time of year!
aptreats.medium.com
December 8, 2024 at 8:51 PM
campuscodi.risky.biz
Putting some order in today's APT announcements:

-APT27 charges: www.justice.gov/usao-dc/pr/c...
-iSoon charges: www.justice.gov/usao-sdny/pr...
-APT27 sanctions: home.treasury.gov/news/press-r...
-iSoon reward: x.com/RFJ_USA/stat...
-IC3 APT27 alert: www.ic3.gov/PSA/2025/PSA...
Chinese Nationals with Ties to the PRC Government and “APT27” Charged in a Computer Hacking Campaign for Profit, Targeting Numerous U.S. Companies, Institutions, and Municipalities
A federal judge in Washington, D.C., today, unsealed two separate indictments that allege Chinese nationals Yin Kecheng, 38, (尹 可成) a/k/a “YKC” (“YIN”) and Zhou Shuai, 45, (周帅) a/k/a “Coldface” (“ZHOU...
www.justice.gov
March 5, 2025 at 9:34 PM
ericjgeller.com
New: DOJ has unsealed indictments against 12 Chinese hackers (2 MPS officers, members of APT27, and employees of a private contractor) for last year's Treasury hack and breaches of other U.S. and Asian government agencies and regime critics. bit.ly/43oVjr0
March 5, 2025 at 4:27 PM
nattothoughts.bsky.social
A recent research from Natto Thoughts about US-sanctioned, allegedly APT27-associated actor. #apt27

nattothoughts.substack.com/p/zhou-shuai...
Zhou Shuai: A Hacker’s Road to APT27
US-sanctioned, allegedly APT27-associated actor Zhou Shuai represents a group of Chinese elite hackers who have become an important resource for Chinese state cyber operations.
nattothoughts.substack.com
March 19, 2025 at 4:17 PM
validhorizon.bsky.social
To save folks a few clicks, this activity from APT27 / Emissary Panda / Lucky Mouse as well APT31 / Judgement Panda plus a bonus criminal actor.
July 22, 2025 at 3:58 PM
kunihisa64.bsky.social
U.S. Department of Justice indicts 12 people linked to #Chinese #hacking #group #APT27 💥 (米司法省、中国系ハッカー集団「APT27」関与の12人を起訴 💥)

URL: gigazine.net/news/2025030...
Images related to the hacker group (APT27) (ハッカー集団（APT27）に関する画像)
March 7, 2025 at 9:55 PM
infosecsherpa.bsky.social
An early New Year's resolution is to keep my food blog updated more often. Here's a start towards that.

Advanced Persistent Treats - APT27: Potato Latkes
medium.com/@aptreats/ap...
APT27: Potato Latkes
Fun at Chanukah or any time of year!
medium.com
December 10, 2023 at 3:39 AM
lenorebeadsman.bsky.social
Dipartimento di Giustizia degli Stati Uniti ha accusato Zhou Shuai e Yin Kecheng
di tracciamento di attività informatiche dannose dal 2011 ad oggi

nome di Zhou Shuai potrebbe essere nuovo per molti

ma nell'ambiente delle attività web
Zhou Shuai è rinomato

era tra gli hacker patriottici cinesi ⬇️
Zhou Shuai: A Hacker’s Road to APT27
US-sanctioned, allegedly APT27-associated actor Zhou Shuai represents a group of Chinese elite hackers who have become an important resource for Chinese state cyber operations.
open.substack.com
March 19, 2025 at 4:55 PM
campuscodi.risky.biz
Podcast: risky.biz/RBNEWS395/
Newsletter: risky.biz/risky-bullet...

-US indicts i-Soon and APT27 hackers
-BADBOX botnet disrupted after return
-Authorities seize Garantex crypto exchange
-Taylor Swift concert ticket hackers arrested
-NTT data breach
-1Password adds support for geo-passwords
March 7, 2025 at 9:41 AM
gigazine.net
中国系ハッカー集団「APT27」メンバーを含む12人をアメリカ司法省が起訴
https://gigazine.net/news/20250306-doj-charges-apt27-member/
中国系ハッカー集団「APT27」メンバーを含む12人をアメリカ司法省が起訴
中国の国益のために活動している脅威アクターの1つで、「Emissary Panda」や「シルク・タイフーン」の別名でも知られるハッカー集団「Advanced Persistent Threat 27(APT27)」のメンバーを含む12人を、アメリカの財務省など100以上の組織へのハッキング容疑で、司法省が起訴しました。
gigazine.net
March 6, 2025 at 5:01 AM
infosecsherpa.bsky.social
Applesauce goes well. I make a sour cream base horseradish sauce. We also had some pineapple salsa as a dip, oh, @viss.hax.lol I forgot to mention the pineapple salsa.
aptreats.medium.com/apt27-potato...
APT27: Potato Latkes
Fun at Chanukah or any time of year!
aptreats.medium.com
January 4, 2025 at 3:05 AM
campuscodi.risky.biz
US charges APT27 members

www.justice.gov/usao-dc/pr/c...
Chinese Nationals with Ties to the PRC Government and “APT27” Charged in a Computer Hacking Campaign for Profit, Targeting Numerous U.S. Companies, Institutions, and Municipalities
A federal judge in Washington, D.C., today, unsealed two separate indictments that allege Chinese nationals Yin Kecheng, 38, (尹 可成) a/k/a “YKC” (“YIN”) and Zhou Shuai, 45, (周帅) a/k/a “Coldface” (“ZHOU...
www.justice.gov
March 5, 2025 at 5:04 PM
lenorebeadsman.bsky.social
di prima generazione a metà degli anni '90

nella sua evoluzione in un hacker sponsorizzato dallo stato dietro APT27
Zhou Shuai rappresenta una coorte di hacker cinesi altamente qualificati

che sono diventati una risorsa significativa per le operazioni informatiche statali cinesi
March 19, 2025 at 4:55 PM
ericjgeller.com
The Treasury Department today sanctioned one of the APT27 hackers and the front company he operated: ofac.treasury.gov/recent-actio...

And the State Department is offering rewards of up to $2 million each for information that leads to the APT27 hackers' arrests: www.state.gov/sanctions-on...
Cyber-related Designations; Counter Terrorism Designations and Designation Update; Issuance of Amended Counter Terrorism General Licenses and New Frequently Asked Question | Office of Foreign Assets C...
ofac.treasury.gov
March 5, 2025 at 4:39 PM
ericjgeller.com
Emphasizing the interconnected nature of the Chinese hacking ecosystem, prosecutors said that the APT27 hackers sometimes sold stolen data to Chinese government agencies through the hacking-for-hire contractor that the U.S. targeted in the other indictment.
March 5, 2025 at 4:36 PM
youranonriots.bsky.social
{NEW} Chinese hackers are exploiting new SharePoint flaws—Microsoft links attacks to #APT27, #APT31 & Storm-2603.

They’re bypassing patches to steal MachineKeys via remote code execution.

The exploit chain is already in the wild. #CyberSecurity #CyberAttacks thehackernews.com/2025/07/micr...
Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups
Microsoft links SharePoint attacks to three China-based groups; flaws allow code execution and data theft on unpatched systems.
thehackernews.com
July 23, 2025 at 4:39 PM
ericjgeller.com
Second and third indictments charge two members of APT27 (Silk Typhoon) with last year's hack of the U.S. Treasury Department, along with profit-motivated hacks of defense contractors, think tanks, and other organizations.

www.justice.gov/usao-dc/medi...
www.justice.gov/usao-dc/medi...
March 5, 2025 at 4:35 PM
r0ny.bsky.social
APT27 & i-soon hackers charged by DOJ—12 caught as the cats are out of the bag now. Yet APT27’s infra still purrs. Let’s see how they claw back from this!

www.justice.gov/opa/pr/justi...
Justice Department Charges 12 Chinese Contract Hackers and Law Enforcement Officers in Global Computer Intrusion Campaigns
The Justice Department, FBI, Naval Criminal Investigative Service, and Departments of State and the Treasury announced today their coordinated efforts to disrupt and deter the malicious cyber activiti...
www.justice.gov
March 5, 2025 at 7:58 PM
frenchieinlimbo.bsky.social
« Deux groupes – APT31 et APT27 – sont impliqués dans les attaques. »
« Les pirates ont utilisé des e-mails de phishing contenant des fichiers malveillants, ce qui leur a donné la possibilité d'installer des logiciels spéciaux sur les ordinateurs. Ces attaques ont commencé fin juillet. »
August 13, 2024 at 1:27 PM
lenorebeadsman.bsky.social
giudice federale di Washington
ha aperto due atti d'accusa contro i cittadini cinesi Yin Kecheng e Zhou Shuai

i due che hanno legami con il governo della Repubblica popolare cinese
sono accusati di aver rubato dati da numerose società tecnologiche, think tank, appaltatori della difesa
Chinese Nationals with Ties to the PRC Government and “APT27” Charged in a Computer Hacking Campaign for Profit, Targeting Numerous U.S. Companies, Institutions, and Municipalities
A federal judge in Washington, D.C., today, unsealed two separate indictments that allege Chinese nationals Yin Kecheng, 38, (尹 可成) a/k/a “YKC” (“YIN”) and Zhou Shuai, 45, (周帅) a/k/a “Coldface” (“ZHOU...
www.justice.gov
March 5, 2025 at 5:19 PM
lukaszolejnik.bsky.social
USA accuses China's State of operating network of "hackers for hire". Accused 12 individuals, 2 officers of the PRC Ministry of Public Security (MPS), employees of a private company, Anxun Information Technology Co. Ltd, and members of APT27. www.justice.gov/opa/pr/justi...
March 5, 2025 at 6:30 PM
tech2geek.net
www.tech2geek.net/phantom-taur...
Phantom Taurus: Inside China’s Most Secretive Cyber-Espionage Operation Revealed - Tech2Geek
When people talk about Chinese cyber-espionage, the same names usually dominate the headlines: APT27, Winnti, Mustang Panda… well-known groups tied to state-sponsored intelligence operations. But...
www.tech2geek.net
November 28, 2025 at 10:58 AM
handle.invalid
US Justice charged Chinese state-sponsored hackers (APT27, i-Soon) with global cyberattacks since 2011, targeting governments and dissidents. i-Soon, a "hack-for-hire," sold stolen data. Rewards offered for arrests.#APT27Indictment
March 5, 2025 at 11:04 PM
hendryadrian.bsky.social
Google Threat Intelligence Group reveals AI was likely used to create a zero-day exploit bypassing 2FA in an open-source web admin tool. Linked APT groups include APT27, APT45, and others. #AIExploits #OpenSource #APT27
Google: Hackers used AI to develop zero-day exploit for web admin tool
Google Threat Intelligence Group says a zero-day exploit against an unnamed open-source web administration tool was likely created with AI to bypass two-factor authentication, and the attack was stopped before mass exploitation. The report also links AI use to other threat activity involving APT27, APT45, UNC2814, UNC5673, UNC6201, CANFAIL, LONGSTREAM, Overload, and PromptSpy. #APT27 #APT45 #UNC2814 #UNC5673 #UNC6201 #CANFAIL #LONGSTREAM #Overload #PromptSpy
www.hendryadrian.com
May 11, 2026 at 4:15 PM
ericjgeller.com
The U.S. Attorneys' offices in D.C. and New York have their own announcements about their separate indictments:

www.justice.gov/usao-dc/pr/c...

www.justice.gov/usao-sdny/pr...
Chinese Nationals with Ties to the PRC Government and “APT27” Charged in a Computer Hacking Campaign for Profit, Targeting Numerous U.S. Companies, Institutions, and Municipalities
A federal judge in Washington, D.C., today, unsealed two separate indictments that allege Chinese nationals Yin Kecheng, 38, (尹 可成) a/k/a “YKC” (“YIN”) and Zhou Shuai, 45, (周帅) a/k/a “Coldface” (“ZHOU...
www.justice.gov
March 5, 2025 at 4:42 PM