Chinese Hackers Hijack ISPs: Malware Mayhem Hits Windows and macOS
StormBamboo’s malware campaign hit both Windows and macOS machines by exploiting insecure update mechanisms through poisoned DNS responses. This notorious hacker group used a compromised ISP to redirect update requests to their own servers, pushing malicious software like MACMA and POCOSTICK instead of legitimate updates.
Hot Take:
Looks like StormBamboo decided to play a game of “Malware Roulette” with Windows and macOS users! Kudos to them for reaching new heights of internet espionage with their ISP-level DNS poisoning. Maybe next time, they’ll hack our toasters too.
Key Points:
- Notorious Chinese hacker group StormBamboo targeted Windows and macOS machines.
- Attack involved compromised ISPs and poisoned DNS responses.
- Organizations’ insecure update mechanisms were exploited.
- Malware such as MACMA and POCOSTICK were deployed.
- Volexity identified the attack and recommended HTTPS for secure updates.
Already a member? Log in here