Since the release of Mandiant’s report on Chinese cyber espionage units in February 2013 the way we think about security – both national security and network security has changed fundamentally. The report, which has been widely covered in the press and download by tens of thousands of people, details the hacking activity of a group that Mandiant calls APT1. The group, which is reputed to be part of a unit within China’s People’s Liberation Army, is one of the most prolific hacking organizations in terms of the sheer quantity of information it has stolen.
Based on the scale and impact of APT1’s operations since 2006, Mandiant wrote a report that not only brought the group’s activity to light, but also provided organizations in the public and private sector with the tools – more than 3,000 indicators of compromise – to identify and defend against APT1’s tactics.
While the report was released nearly 6 months ago, the story is still highly newsworthy – in fact, it was really just the tip of the iceberg. In this recent podcast with Bloomberg Government, Richard Bejtlich, Mandiant Chief Security Officer, discusses the latest cyber challenges and gives advice for organizations.