US, Japan Accuse Chinese Hackers of Hiding in Cisco Routers to Steal Data

Chinese government hackers are hiding in Cisco routers to steal data, per US, Japan officials.
The hackers belong to a group called BlackTech that targets government, companies in US and Asia.
BlackTech replaces router firmware to create backdoors without being detected.
The hackers use custom malware to compromise Windows, Linux, FreeBSD systems.
The report doesn't explain how hackers initially access devices or the timing of the joint security alert.

theregister.com

Relevant topic timeline:

9/28/2023

U.S. and Allies Warn Companies of China-Linked Hacker Group BlackTech Targeting Tech Firms and Governments

The U.S., Japanese police, and cybersecurity agencies have issued a joint advisory warning multinational companies about the China-linked hacker group BlackTech, urging firms to review their internet routers to minimize the risk of potential attacks from the group.

10/22/2023

Five Eyes Leaders Warn China Poses Major Espionage Threat Through Fake LinkedIn Accounts, Intimidation Campaigns, and Hacking

China poses an unprecedented global espionage threat, targeting professional networking sites like LinkedIn to steal intellectual property and using a program called Operation Fox Hunt to harass and intimidate Chinese dissidents abroad, according to intelligence leaders from the Five Eyes alliance.