Chinese Hackers Hijack ISPs: Malware Mayhem Hits Windows and macOS

StormBamboo’s malware campaign hit both Windows and macOS machines by exploiting insecure update mechanisms through poisoned DNS responses. This notorious hacker group used a compromised ISP to redirect update requests to their own servers, pushing malicious software like MACMA and POCOSTICK instead of legitimate updates.

Hot Take:

Looks like StormBamboo decided to play a game of “Malware Roulette” with Windows and macOS users! Kudos to them for reaching new heights of internet espionage with their ISP-level DNS poisoning. Maybe next time, they’ll hack our toasters too.

Key Points:

  • Notorious Chinese hacker group StormBamboo targeted Windows and macOS machines.
  • Attack involved compromised ISPs and poisoned DNS responses.
  • Organizations’ insecure update mechanisms were exploited.
  • Malware such as MACMA and POCOSTICK were deployed.
  • Volexity identified the attack and recommended HTTPS for secure updates.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here