Nasty VPN vulnerability used to eavesdrop on companies across the globe

Image Credit: Pixabay (Image credit: Pixabay)

Governments and financial organizations around the world have been targeted by an espionage campaign allegedly linked to Chinese state-sponsored actors.

Earlier this week, American cybersecurity firm Ivanti acknowledged a flaw in its Pulse Connect Secure VPN devices that had allowed bad actors to move into the systems of “a very limited number of customers".

At the moment, there are no patches for the Pulse Connect Secure suite flaw, but mitigations have been put in place. The company expects a patch to be released next month.

Similar attack pattern

China has denied all allegations, with the country’s US embassy claiming it "firmly opposes and cracks down on all forms of cyber attacks". Officials described FireEye's insinuations as "irresponsible and ill-intentioned."

FireEye, on the other hand, has based its conclusions on the tactics, tools, infrastructure and targets, all of which were strikingly similar to previous attacks linked to China.

The Department of Homeland Security was brief in its statement, saying it is working with Ivanti "to better understand the vulnerability in Pulse Secure VPN devices and mitigate potential risks to federal civilian and private sector networks".

Further details are scarce, but Carmakal did add that the attackers were working from American infrastructure, borrowing the naming conventions of their victims to help them hide in plain sight.

Here's our rundown of the best endpoint protection software out there

Via: Reuters

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.