# Watch how real shit gets the next few years (China hacking everyone) **URL:** \ **Category:** NYSpeed Off Topic\ **Created:** [November 9, 2012, 11:53am UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108 "2012-11-09T11:53:29Z")\ **Posts on this page:** 20\ **Page:** 10
**Author:** ![JayS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jays/32/15375_2.png) [@JayS](https://forums.speedlife.net/u/JayS)\ **Post date:** [March 3, 2021, 2:06pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/181 "2021-03-03T14:06:39Z")
Beijing Biden certainly isn’t going to help here. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [March 6, 2021, 1:35pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/182 "2021-03-06T13:35:21Z")
> **[Microsoft: Chinese Cyberspies Used 4 Exchange Server Flaws to Plunder Emails —...](https://krebsonsecurity.com/2021/03/microsoft-chinese-cyberspies-used-4-exchange-server-flaws-to-plunder-emails/)** > > Microsoft Corp. today released software updates to plug four critical security holes that attackers have been using to plunder email communications at companies that use its Exchange Server products. The company says all four flaws are being actively... > **[At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s...](https://krebsonsecurity.com/2021/03/at-least-30000-u-s-organizations-newly-hacked-via-holes-in-microsofts-email-software/)** > > At least 30,000 organizations across the United States -- including a significant number of small businesses, towns, cities and local governments -- have over the past few days been hacked by an unusually aggressive Chinese cyber espionage unit... ---
**Author:** ![Onyx\_Z32](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/onyx_z32/32/7581_2.png) [@Onyx\_Z32](https://forums.speedlife.net/u/Onyx_Z32)\ **Post date:** [March 9, 2021, 1:09am UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/183 "2021-03-09T01:09:31Z")
A bonus to this thread is that I get ads for Infosec & Clearencejobs after reading @LZ1’s links, lol ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [March 9, 2021, 1:12pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/184 "2021-03-09T13:12:40Z")
Good! ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [March 9, 2021, 5:32pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/185 "2021-03-09T17:32:27Z")
> **[Chinese hackers targeted SolarWinds customers in parallel with Russian op](https://arstechnica.com/gadgets/2021/03/chinese-hackers-targeted-solarwinds-customers-in-parallel-with-russian-op/)** > > New data suggests that Russia wasn't the only nation-state hacking customers. ---
**Author:** ![Onyx\_Z32](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/onyx_z32/32/7581_2.png) [@Onyx\_Z32](https://forums.speedlife.net/u/Onyx_Z32)\ **Post date:** [April 18, 2022, 10:12am UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/186 "2022-04-18T10:12:19Z")
Kinda fits here. Localized hacking with fire… > **[Opinion | Who Burned Down the Sculpture of Xi Jinping at a California Park?](https://www.wsj.com/articles/burned-down-xi-jinping-california-sculpture-park-liberty-chinese-vandals-covid-beijing-ccp-america-art-11650055883)** > > Federal prosecutors say Weiming Chen’s ‘CCP Virus’ was destroyed by men working for China. ---
**Author:** ![drvnkd](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/drvnkd/32/109615_2.png) [@drvnkd](https://forums.speedlife.net/u/drvnkd)\ **Post date:** [April 18, 2022, 9:29pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/187 "2022-04-18T21:29:41Z")
Hit a pay wall ☹ ---
**Author:** ![juicedz4](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/juicedz4/32/5051_2.png) [@juicedz4](https://forums.speedlife.net/u/juicedz4)\ **Post date:** [February 15, 2023, 2:25pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/188 "2023-02-15T14:25:59Z")
On 3 Feb my company was hit with a ransomware event. > **[MKS Instruments falls victim to ransomware attack](https://www.csoonline.com/article/3687098/mks-instruments-falls-victim-to-ransomware-attack.html)** > > The semiconductor equipment maker reported the ransomware incident just a day after national cybersecurity agencies and security experts around the world warned about a global ransomware attack that hit thousands of servers running on VMware ESxi. Its basically shut us down for almost two weeks now. Many of us are attempting to work from home but with only email and workday not much work is getting done. All of our factories are completely shut down. We cant even physically go in. Its pretty wild, i cant imagine how much money this is costing us - we do something like $3B/yr in revenue. ---
**Author:** ![ubengineering](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/ubengineering/32/5171_2.png) [@ubengineering](https://forums.speedlife.net/u/ubengineering)\ **Post date:** [February 15, 2023, 3:46pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/189 "2023-02-15T15:46:10Z")
Damn, how do they recover from this? ---
**Author:** ![bing](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/bing/32/7211_2.png) [@bing](https://forums.speedlife.net/u/bing)\ **Post date:** [February 15, 2023, 3:57pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/190 "2023-02-15T15:57:14Z")
the solution here is to work exclusively for unimportant companies with nothing proprietary and no meaningful secrets that could be monetized. ---
**Author:** ![drvnkd](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/drvnkd/32/109615_2.png) [@drvnkd](https://forums.speedlife.net/u/drvnkd)\ **Post date:** [February 15, 2023, 4:02pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/191 "2023-02-15T16:02:06Z")
> [@bing](#): > > the solution here is to work exclusively for unimportant companies with nothing proprietary and no meaningful secrets that could be monetized. So, we should be looking for typical government jobs? ---
**Author:** ![HouseS2K](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/houses2k/32/100273_2.png) [@HouseS2K](https://forums.speedlife.net/u/HouseS2K)\ **Post date:** [February 15, 2023, 4:43pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/192 "2023-02-15T16:43:12Z")
Just in the past year the amount of security they added has been relentless. I often have to prove my identity multiple times a day even after entering a password with upper/lower/number/special characters every time I open it. It’s honestly annoying. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [February 15, 2023, 6:04pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/193 "2023-02-15T18:04:28Z")
lol ---
**Author:** ![bing](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/bing/32/7211_2.png) [@bing](https://forums.speedlife.net/u/bing)\ **Post date:** [February 15, 2023, 7:44pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/194 "2023-02-15T19:44:22Z")
> [@LZ1](#): > > lol tell us a story bruh! ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [February 15, 2023, 7:58pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/195 "2023-02-15T19:58:14Z")
What story? How ransomware groups operate? What initial access methods they use? Nexus with nation states? Ransomware is pretty much everywhere these days. ---
**Author:** ![JayS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jays/32/15375_2.png) [@JayS](https://forums.speedlife.net/u/JayS)\ **Post date:** [February 15, 2023, 8:10pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/196 "2023-02-15T20:10:20Z")
Hit our credit union customers hard about a year ago but has calmed down a lot since then. Did teach some people the importance of backups though, especially off site backups, and more specifically why they should pay us to handle that for them. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [February 15, 2023, 8:44pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/197 "2023-02-15T20:44:04Z")
It’s funny most of the ransomware stuff is human driven these days. A big target is them going after backups first which are often not protected. ---
**Author:** ![Onyx\_Z32](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/onyx_z32/32/7581_2.png) [@Onyx\_Z32](https://forums.speedlife.net/u/Onyx_Z32)\ **Post date:** [February 16, 2023, 12:28pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/198 "2023-02-16T12:28:30Z")
I see the stuff @lz posts on Twitter and I have no clue what he’s talking about, but it keeps me aware that there’s probably some vulnerability in our process at one of my jobs. @lz do you have someone you can recommend to do a security assessment of an organization? ---
**Author:** ![JayS](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/jays/32/15375_2.png) [@JayS](https://forums.speedlife.net/u/JayS)\ **Post date:** [February 16, 2023, 12:46pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/199 "2023-02-16T12:46:52Z")
> [@LZ1](#): > > It’s funny most of the ransomware stuff is human driven these days. A big target is them going after backups first which are often not protected. I think that’s why it slowed down at our CU’s honestly. People finally got the message to stop opening sketchy emails. ---
**Author:** ![LZ1](https://avatars.discourse-cdn.com/v4/letter/l/7ab992/32.png) [@LZ1](https://forums.speedlife.net/u/LZ1)\ **Post date:** [February 16, 2023, 1:03pm UTC](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108/200 "2023-02-16T13:03:50Z")
It’s going to completely depend on type of org, budget, regulatory requirements, and overall risk. For a lot of places it’s perform backups, run an EDR(Microsoft ATP, Crowdstrike, etc), use multi factor on all external login interfaces…Other places its have a multi million dollar budget and a lot of head count. [Previous page](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108.md?page=9) [Next page](https://forums.speedlife.net/t/watch-how-real-shit-gets-the-next-few-years-china-hacking-everyone/227108.md?page=11)