19 juin 2024 | International, Sécurité

UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying

Discover how UNC3886 exploits Fortinet and VMware vulnerabilities in sophisticated cyber espionage campaigns. Learn about advanced persistence methods

https://thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html

Sur le même sujet

  • What’s the best way for the Army to demonstrate force via electronic warfare?

    18 juin 2019 | International, C4ISR, Autre défense

    What’s the best way for the Army to demonstrate force via electronic warfare?

    By: Mark Pomerleau When the Russian military attacked Ukraine, it prevented units from communicating with each other by turning to powerful electronic jamming tools. The U.S. Army, however, is not interested in the same raw demonstration of force. Instead, U.S. officials are following a philosophy that relies on “surgical” attacks. This could include creating an image on enemy's radar, projecting an aircraft at one location when enemies think it is at another, or impairing the command and control links of adversaries' unmanned aerial systems. “When the Russians emit like that, they're letting the entire world know where they are,” Col. Mark Dotson, the Army's capabilities manager for electronic warfare said on a media call with two reporters June 14. “What we're looking at in the future ... [is] surgical electronic attack, electronic intrusion or 21st century electron attack. We're looking for much more discrete ways of conducting electronic attack. Using low power to affect the signal and to affect it in such a way that it may not even be detectable that you're interfering with what they're doing.” Dotson said instead of sheer power, future capabilities should focus on the end result, such as whether it's hurting an enemy's ability to communicate or to use radar. “There's a variety of different approaches that can be taken to create the effect necessary without having to do what we refer to as traditional jamming, which is just increasing the signal to noise ratio,” Dave May, senior cyber intelligence advisor at the Cyber Center of Excellence, said. Finding materiel solutions The officials spoke at the conclusion of Cyber Quest, a week-long technology experimentation that took place at Fort Gordon. Cyber Quest is a prototyping event that allows the Army to test technologies and concepts from industry to help solve future problems. This year, Army leaders focused on several areas. They include: Improving the requirements for the Terrestrial Layer System, an integrated electronic warfare and signals intelligence system that will provide a much-needed jamming capability to formations; Identifying candidates for rapid acquisition, and Conducting risk reduction against current programs and identifying candidates for electronic warfare capabilities to outfit the Intelligence, Information, Cyber, Electronic Warfare and Space detachment or I2CEWS, a battalion-sized unit described as the “brain” of the Army's multidomain task force. “Cyber Quest helps ... in that we are able to take these difficult challenges to industry, walk them through what we're trying to accomplish and let industry come back to us with novel approaches,” May said. “This pre-prototyping philosophy allows us to work through concepts, [tactics, techniques and procedures], and actually start the concept for doctrine.” At Cyber Quest, Army officials focused on the overall TLS system and two subsets: the Tactical Electronic Warfare System (TEWS) and the Tactical Signals Intelligence Vehicle. Both are integrated platforms the Army is using to experiment with different technologies that would allow for sensing, signals intelligence, electronic warfare and RF-enabled cyberattacks. May said these subsystems are in the pre-prototype phase. Army leaders also tested a spectrum analyzer tool that will notify commanders of the health of their systems within the electromagnetic spectrum. Such a tool would provide details on the footprint of blue force electromagnetic spectrum. The Army's current spectrum management program of record, Electronic Warfare Planning and Management Tool, only offers details on red force's in the spectrum relying on sensors in the field. By contrast, the spectrum analyzer tool the Army looked at during Cyber Quest is a handheld system that doesn't need to rely on the sensors that belong to tactical operational tools. There's been a focus across all the services in recent years to better understand their own electromagnetic spectrum as a way to prevent themselves from being detected and jammed or detected and killed. The details for when these capabilities would reach soldiers, however, is still in flux. If the Army has approved a requirement, a new product can be fielded to certain units under what the Army refers to as a buy, try, decide model. Capabilities can be fielded faster if they are funneled through the Rapid Equipping Force, though, they wouldn't become a program of record, but could be fielded to operational units that need it between 90 days and six months. If a capability goes through the Rapid Capabilities Office, it could take six to 18 months to get to units, Dotson said. May said the goal for TLS is to deliver a “validated requirement” to the program manager by third quarter of fiscal year 2020. That puts fielding in the 2022 or 2023 timeframe. Officials were a bit more circumspect on the Multi-Functional Electronic Warfare Air Large program, a first of its kind brigade-organic aerial electronic attack pod that will be mounted on unmanned systems. Lockheed Martin was awarded was awarded two sequential 18-month contracts valued at $18 million in January. Officials said it should be flying within the next 12 months but added that they want to see the product that ends up flying before forecasting a timeline for when it would reach units. https://www.c4isrnet.com/electronic-warfare/2019/06/17/whats-the-best-way-for-the-army-to-demonstrate-force-via-electronic-warfare/

  • On the ground at Yokota Air Base, the Air Force transport hub of the Pacific

    10 décembre 2018 | International, Aérospatial

    On the ground at Yokota Air Base, the Air Force transport hub of the Pacific

    By: Mike Yeo MELBOURNE, Australia — In the west of the sprawling metropolis that is Tokyo lies Yokota Air Base, a major air transportation hub in the U.S. military's Indo-Pacific Command's area of responsibility and a critical waypoint for cargo, passengers and VIPs. Occupying an area of approximately 2.75 square miles that includes a single 11,000-foot runway that runs roughly north to south, the base is also home to U.S. Forces Japan, a joint service headquarters coordinating matters affecting U.S. and Japanese defense relations, and Fifth Air Force, whose mission is to enhance the U.S. deterrent posture and, if necessary, provide fighter and military airlift support for offensive air operations. Other tenant units on base include the 730th Air Mobility Squadron of the 515th Air Mobility Operation Group, which manages air mobility operations throughout the Western Pacific, and the Japanese Air Defense Command, which controls Japan's air defense mission. Air traffic control for the base is integrated with Tokyo's air traffic system, a must given the busy nature of the skies above the Japanese capital with its two international airports and a number of Japanese Self-Defense Force bases in the vicinity. As a logistics hub, Yokota plays host to all kinds of visiting aircraft on a regular basis, with Captain Felicia Ticas, airfield operations flight commander, telling Defense News that the base “accepts around 2,100 transient aircraft annually, which includes U.S. Air Force, Japanese Self Defense Forces, and other allied aircraft.” She added: “Our role as the primary logistics hub means we move 85,000 personnel and 19,000 tons of cargo every year in and around Indo-Asia-Pacific, which is essential to meet the peace and stability objectives of our nation and our allied partners.” The visitors have included secretaries of state and defense Mike Pompeo and James Mattis during their visits to the region, as well as President Donald Trump who landed there during a visit to Japan in November 2017. 374th Airlift Wing The host unit at Yokota is the 374th Airlift Wing. The Wing includes four groups: operations, mission support, maintenance and medical. Each group manages several squadrons in order to carry out the wing's mission, which is to execute rapid global mobility through agile airlift operations across the Indo-Asia-Pacific region and as the primary Western Pacific airlift hub for peacetime and contingency operations, the wing provides airlift for the movement of passengers, cargo and mail to all Department of Defense agencies in the Pacific area of responsibility and provides transport for people and equipment throughout the Kanto Plain and the Tokyo metropolitan area. In addition to the Lockheed-Martin C-130J Super Hercules tactical airlifters of the 36th Airlift Squadron, the other flying squadron at Yokota is the 459th Airlift Squadron. The unit operates a mixed fleet of Bell UH-1N helicopters and Raytheon C-12J Hurons to fulfil its mission of providing airlift support for distinguished visitors as well as other priority passengers and cargo, along with conducting aeromedical evacuation, search and rescue and priority airlift missions throughout the Pacific. The UH-1N Huey, whose design dates back to the Vietnam War, is used by the 459th AS to provide distinguish visitor and cargo transport throughout the Kanto Plain which encompasses the Greater Tokyo area, according to Major Matthew Sims, assistant director of operations of the 459th AS. In addition, he told Defense News that the type is also used to provide medical transport and search and rescue assistance for the government of Japan, and can be configured with a rescue hoist and litters for medical cases as the mission requirements demand. The twin turboprop-engined C-12J Hurons serving alongside the UH-1Ns at the 459th AS are used primarily for VIP transport. However, they have also become the primary response aircraft for small-scale aeromedical evacuation. An aeromedical evacuation nursing team is now deployed to the base on a rotational basis, with each team there two- to three-week deployment to support the mission. The use of the C-12J, which is based on the Raytheon 1900C regional airliner, has significantly freed up the USAF's primary aeromedical evacuation platform, the KC-135R tanker, to perform its primary role and Major Drew Skovran, 459th AS Assistant Operations Officer called the C-12J “the most cost-effective airlifter for small groups in the PACAF inventory carrying 10-18 passengers or up to 3000 lbs of cargo. With the addition of a converted hospital bed we are one of the premier platforms for aeromedical evacuation for all joint partners in the AOR”. Non-flying elements of the Wing includes the 374th Logistics Readiness Squadron, which directs logistics for Western Pacific airlift hub orchestrates mobilization of wing and tenant units supporting Pacific Command's operations plans, currently stores over 13 million and issues over 36 million gallons of fuel. Part of the unit includes its Combat Mobility Flight, which is responsible for the support of real-world contingencies, INDOPACOM and/or PACAF exercises, and humanitarian assistance/disaster relief mission support. It is also “the only PACAF unit that builds and specializes in coastal humanitarian air drop, allowing for specialized humanitarian relief aid avoiding possible damage to people and buildings” according to Technical Sergeant Ryan Aubert, a Recovery Lead at the 374th Logistics Readiness Squadron's Combat Mobility Flight Air Force Ospreys The sole USAF flying element at Yokota that is not part of the 374th AW are the Bell-Boeing CV-22 Osprey tiltrotor aircraft assigned to the 353rd Special Operations Group. The first five Ospreys arrived at Yokota in April this year, and that number will eventually rise to ten. Four of the unit's Ospreys were subsequently deployed to Iwakuni to take part in search and rescue operations following the collision of a U.S. Marine Corps KC-130J tanker and F/A-18D Hornet fighter jet off Japan in early December, joining the C-130Js of 36th AS along with other U.S. military and Japanese Self-Defense Force aircraft. The 353rd SOG is based out of Kadena Airbase in Okinawa operating the MC-130H Combat Talon II and MC-130J Commando II special missions aircraft modified from the C-130 Hercules, and according to 1st Lieutenant Renee Douglas, a spokesperson from the unit, the CV-22Bs are based at Yokota because the base “was the location that provided the most effective operations, training and maintenance environment for the CV-22.” Due to training and operational requirements, Defense News was unable to speak to the Osprey detachment at Yokota to learn more about their mission, but 1Lt Douglas added in an emailed response to questions from Defense News that “having CV-22s at Yokota Air Base will help our forces develop expertise, build long-term relationships with the host nation to ensure stability, and contribute to special operations capabilities with our allies and security partners.” The continuing security challenges in the region and the presence of forward deployed elements of the U.S. military means that Yokota's status of a regional logistics hub is here to stay and even increase in the future. Asked to sum up the importance of the base and the wing's mission, Colonel Otis Jones, commander of the 374th AW, told Defense News that “because of our proximity to Tokyo, along with the unique airlift capabilities we contribute to the region, Yokota, and specifically the 374th Airlift Wing, provides an advantageous hub for cargo and personnel moving into and out of the Pacific area of responsibility.” The wing also executes rapid global mobility through agile airlift operations across the Indo-Asia-Pacific region and engages in regular bilateral engagements with the Japanese Self Defense Force, surrounding communities and the local Japanese government. https://www.defensenews.com/digital-show-dailies/japan-aerospace/2018/12/07/on-the-ground-at-yokota-air-base-the-air-force-transport-hub-of-the-pacific/

  • Thales inks $2B deal to improve British Royal Navy’s maintenance

    5 février 2024 | International, Naval

    Thales inks $2B deal to improve British Royal Navy’s maintenance

    The support program will see Thales use data technology, including AI and virtual reality, to provide more proactive and predictive maintenance.

Toutes les nouvelles