Security researchers at Google and Microsoft have evidence that hackers supported by China are exploiting a zero-day bug in Microsoft SharePoint, prompting companies worldwide to rush to patch the flaw.
Microsoft has identified two China-backed hacking groups, Linen Typhoon and Violet Typhoon, taking advantage of the vulnerability. Linen Typhoon focuses on stealing intellectual property, while Violet Typhoon steals private information for espionage purposes.
Another China-backed hacking group named Storm-2603 has also been attributed to ongoing hacks, with connections to ransomware attacks in the past.
These hacking groups have been exploiting the zero-day vulnerability in SharePoint servers since July 7, leading to numerous organizations being compromised, including in the government sector.
Although Microsoft has released patches for all affected versions of SharePoint, security researchers warn that organizations running self-hosted versions should assume they have already been compromised.
The Chinese government has denied involvement in cyberattacks but has not explicitly refuted accusations.
This is not the first hacking campaign linked to China, with previous incidents involving the targeting of self-hosted Microsoft Exchange email servers in 2021.
It’s important to stay vigilant against cyber threats and ensure proper security measures are in place to protect sensitive information.
