Cyber attacks target IT providers as stepping stone to gain access to their clients

The BBC is reporting that serious cyber attacks are targeting IT outsourced service firms to gain access to their true targets.

UK firms have been warned about “serious” cyber attacks originating in China that seek to steal trade secrets.

The gang behind the attacks has compromised technology service firms and plans to use them as a proxy for attacks, security firms have said….

By targeting the suppliers of IT outsourcing, the attackers were able to stealthily gain access to the networks and systems of their true targets.

Dr Adrian Nish, head of threat intelligence at BAE, said the attackers used these third parties as a “stepping stone” to get at the companies and organisations they were really interested in.

Infiltrating supply chains gave the attackers an easy route into many different targets.

“Organisations large and small rely on these providers for management of core systems and as such they can have deep access to sensitive data,” he said…

Spear phishing emails booby-trapped with custom-made malware were sent to key staff in IT services firms in the first stage of an attack. Once the hackers had won access they sought out intellectual property and other sensitive data…

Read more at ‘Serious’ hack attacks from China targeting UK firms