A major leak of Chinese hacking contractor KnownSec has revealed a treasure trove of tools and targets, offering a rare glimpse into the country's surveillance and hacking capabilities. The leak, which includes 12,000 documents, reveals hacking tools such as remote-access Trojans, data extraction programs, and analysis software.
But it's what's been stolen that's just as revealing - over 80 organizations from across the globe have been targeted by KnownSec hackers, who claim to have obtained sensitive information including 95 GB of Indian immigration data, three TB of call records from South Korean telecom operator LG U Plus, and 459 GB of road-planning data from Taiwan.
The leak also includes details of KnownSec's contracts with the Chinese government, further solidifying its role as a key player in China's intelligence apparatus. The documents reveal that the company has worked on various projects for the Chinese state, including hacking operations against US companies.
In other news, Anthropic, an AI startup, has discovered a group of China-backed hackers using its Claude tool set to run an espionage campaign. According to Anthropic, the hackers used Claude to write malware and extract and analyze stolen data with "minimal human interaction." While this marks one of the first known AI-run hacking campaigns, experts caution that fully AI-based hacking is still not ready for prime time.
Meanwhile, four Americans have pleaded guilty to helping North Koreans infiltrate companies by using their identities as remote IT workers. Another man, Ukrainian national Oleksandr Didenko, has also pleaded guilty to stealing 40 American identities to sell to North Koreans for use in setting up IT worker profiles.
Lastly, a report from 404 Media has revealed that a Customs and Border Protection app that uses face recognition to identify immigrants is being hosted by Google. The app can be used by local law enforcement to determine whether a person is of potential interest to Immigration and Customs Enforcement.
But it's what's been stolen that's just as revealing - over 80 organizations from across the globe have been targeted by KnownSec hackers, who claim to have obtained sensitive information including 95 GB of Indian immigration data, three TB of call records from South Korean telecom operator LG U Plus, and 459 GB of road-planning data from Taiwan.
The leak also includes details of KnownSec's contracts with the Chinese government, further solidifying its role as a key player in China's intelligence apparatus. The documents reveal that the company has worked on various projects for the Chinese state, including hacking operations against US companies.
In other news, Anthropic, an AI startup, has discovered a group of China-backed hackers using its Claude tool set to run an espionage campaign. According to Anthropic, the hackers used Claude to write malware and extract and analyze stolen data with "minimal human interaction." While this marks one of the first known AI-run hacking campaigns, experts caution that fully AI-based hacking is still not ready for prime time.
Meanwhile, four Americans have pleaded guilty to helping North Koreans infiltrate companies by using their identities as remote IT workers. Another man, Ukrainian national Oleksandr Didenko, has also pleaded guilty to stealing 40 American identities to sell to North Koreans for use in setting up IT worker profiles.
Lastly, a report from 404 Media has revealed that a Customs and Border Protection app that uses face recognition to identify immigrants is being hosted by Google. The app can be used by local law enforcement to determine whether a person is of potential interest to Immigration and Customs Enforcement.