Lina recently posted on LinkedIn that she’d published another blog post. Her blog posts are always well written, easy to follow, fascinating, and very informative, and this one did not disappoint.
In short, Lina says that she found a bunch of Chinese blog posts and content describing activity that Chinese cybersecurity entities have attributed to what they refer to as “APT-C-40”, or the NSA. So, she read through them, translated them, and mapped out a profile of the NSA by overlaying the various write-ups.
Lina’s write-up has a lot of great technical information, and like the other stuff she’s written, is an enthralling read. Over the years, I’ve mused with others I’ve worked with as to whether or not our adversaries had dossiers on us, or other teams, be they blue or red. As it turns out, thanks to Lina, we now know what they do, what those dossiers might look like, and the advantage that the eastern countries have over the west.
For me, the best part of the article was Lina’s take-aways. It’s been about 30 yrs since I touched a Solaris system, so while I found a lot of what Lina mentioned in the article interesting (like how the Chinese companies knew that APT-C-40 were using American English keyboards…), I really found the most value in the lessons that she learned from her review and translation of open Chinese reporting. Going forward, I’ll focus on the two big (fo
[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.
Read the original article: