Chinese Hackers Exploit Versa Director Flaw

Chinese hackers, identified as the “Volt Typhoon” group, exploited a critical vulnerability in Versa Director, a software platform widely used by internet companies, according to a report by Lumen Technologies. This previously unknown flaw allowed the hackers to breach several U.S. and Indian internet companies, with the aim of conducting surveillance on their customers. The campaign is believed to have started as early as June 12, 2024, and targeted internet service providers, among other victims. Lumen’s researchers have expressed “moderate confidence” that the Volt Typhoon group is state-sponsored by the Chinese government, though this has been vehemently denied by the Chinese Embassy, which claims that the group is a criminal gang unaffiliated with the state.

The breach has raised significant concerns in the cybersecurity community, particularly in light of previous warnings from U.S. officials about China’s growing cyber capabilities. In April, FBI Director Christopher Wray highlighted the increasing threat posed by China, noting that the country is developing the ability to disrupt critical U.S. infrastructure. The breach also underscores the importance of timely software updates and robust cybersecurity measures, especially for companies that handle sensitive data.

Versa Networks, the company behind the compromised software, has since issued an advisory urging customers to update their systems to prevent further exploitation. The affected companies are currently working to secure their networks and assess the full impact of the breach, as they collaborate with cybersecurity experts to mitigate any ongoing risks.

Source: Reuters

The European Cyber Intelligence Foundation is a nonprofit think tank specializing in intelligence and cybersecurity, offering consultancy services to government entities. To mitigate potential threats, it is important to implement additional cybersecurity measures with the help of a trusted partner like INFRA www.infrascan.net, or you can try yourself using check.website.