Chinese Government-Linked Cyber Threat Actors Exploit Critical Infrastructure

A joint cybersecurity advisory details how Chinese government-linked cyber threat actors are combining automated and hands-on hacking tools, including large-scale botnets and living-off-the-land techniques, to steal sensitive data from multiple U.S. critical infrastructure sectors. The advisory provides tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations detect, prevent, and respond to these attacks.