Hunt for RedNovember: Beijing hacked critical orgs in year-long snooping campaign

RedNovember, a Chinese state-sponsored cyberspy group, targeted government and critical private-sector networks around the globe between June 2024 and July 2025, exploiting buggy internet-facing appliances to deploy a Go-based backdoor called Pantegana and other offensive security tools, including Cobalt Strike and SparkRAT. …

[VoiceOfTruth]

Nice load of propaganda there

Now let's see an article about intensive American hacking. Come on.

Recorded Future is another American cyber security company which mysteriously doesn't seem to find any American hacking around the globe. Now why is that? If it turns a blind eye to American hacking it cannot be trusted.

[Sandtitz]

Re: Nice load of propaganda there

"Nice load of propaganda there"

Which parts of the report were untrue? What makes it propaganda?

"doesn't seem to find any American hacking around the globe."

You seem to be trying to divert the conversation from the numerous Chinese state-sponsored hacking cases.

Perhaps USA just doesn't have as many state-sponsored hacking crews as Russia, China et.al.

"If it turns a blind eye to American hacking it cannot be trusted."

The magic word in that sentence is the first one. "If your aunt had bollocks, she'd be your uncle."

Your tirade here is called whataboutism, itself a typical propaganda measure to change the focus of discussion to something different.

I'm ready to continue this discussion further. Are you?

[VoiceOfTruth]

Re: Nice load of propaganda there

I don't waste my time discussing with idiots. But I will respond to your general point. I cannot remember even one American company that has come forward with information uncovering American spying. It is America that is doing the diverting.

Every time I read yet another article in The Register about a new China spy crew being uncovered, I wonder where are the articles about American spy crews.

[Sandtitz]

Re: Nice load of propaganda there

"I don't waste my time discussing with idiots."

Neither do I, but I will make an exception with you.

"I cannot remember even one American company that has come forward with information uncovering American spying."

You seem to imply that American cyber spy ops are uncovered frequently. Where do you base that?

USA, China and Russia all have spies in foreign countries, I'm not disputing that. Do you?

"It is America that is doing the diverting."

Perhaps. One can only guess the reasons for you playing a defender for China.

"Every time I read yet another article in The Register about a new China spy crew being uncovered, I wonder where are the articles about American spy crews."

So, you are saying that El Reg is part of a greater conspiracy to not print stories American spy crews?

If you just happen to be adept at say, Chinese or Russian languages, perhaps you can point us to these uncovered American spy crew stories in (credible) Chinese/Russian media? No?

[Anonymous Coward]

Re: Nice load of propaganda there

Mr Sandtitz (may I call you Sand?) bear in mind the old aphorism about wrestling with a pig - you both get mucky, and the pig enjoys it.

VoiceOfMoscow clearly got touched in a bad way by an American as a baby and is frothingly anti-Western as a result. Ignore and move on.

[Sandtitz]

Re: Nice load of propaganda there

"(may I call you Sand?)"

No.

"wrestling with a pig - you both get mucky, and the pig enjoys it."

Well, you are right, but the stooges here are turning this fine forum slowly into a dung heap.

As in real life you can either act, or just stand by and watch. Voting a pesudonym down is meaningless, the pigs don't care.

[Anonymous Coward]

Re: Nice load of propaganda there

I'll bite.

We know every country on the planet (well nearly) hacks. They have secret services. They recruit people to hack. Americans hack Russians. Russians hack America. China hacks America. America hacks China.

We live in the west. Hacks on the west are going to be reported. Hacks elsewhere are not because it is of no interest to the majority. That's not propaganda. That's just the way it is.

The only issue I have with the reporting of hacking is that there is absolutely no definitive way of determining who is doing the hacking. None. Origin can be spoofed. Language can be spoofed. Stating we know it's them because of this when the the this can't be confirmed either is not proof. In that sense there is propaganda. Some of them could even be countries hacking themselves.

An American cyber security company will never ever come across American hacking because it doesn't work for foreign countries or companies. This is common sense logic.

Maybe one day a journalist will go the extra mile and see what the foreign press is saying about the west. That would be quite an interesting article to be fair.

[PhilipN]

"no definitive way of determining who is doing the hacking"

And Insikt Group start off drawing attention to a "likely" connection with China then immediately jump to "it IS China".

[Anonymous Coward]

"The Chinese have been colonizing wide swaths of Western cyberspace for years"

Heresy - only the West is allowed to colonize any kind of space.

It's in the rule book...

[andy the pessimist]

modifying ROM

In the article it refers to modifying rom. That shouldn't be possible. Is it otp, flash or something similar?

[sitta_europea]

Re: modifying ROM

"In the article it refers to modifying rom. That shouldn't be possible. ... "

Obviously, by definition ROM can't be written.

Clearly they're calling it ROM when is isn't, in fact, ROM at all.

I live in hope of one day meeting the genius who decided that it was a good idea to make what should have been ROM writeable without *also* adding a DIP switch - or even a jumper - to the board.

[Missing Semicolon]

Smoking holes in the ground

Why isn't that all that's left of these "security appliance" companies. All their stuff seems to be trivially exploitable, so buying a nice new VPN appliance merely advertising that you are worth hacking.

[harrys]

Bottom line

I can still go out in the street and say freely starmer is a wanker

Can u do that in China to Winnie ?

Democracy is imperfect and sucks... but it's better then the rest

[W.S.Gosset]

ROM?

I admit to being a bit baffled by this:

>The attackers abused these security flaws to MODIFY read-only memory (ROM)

Has the definition of ROM changed while I wasn't looking?