Jun 10, 10:25 PM

SentinelOne Foils China-Linked PurpleHaze Attacks Exploiting Zero-Day Flaws; Microsoft Patches 67 Vulnerabilities; INTERPOL Dismantles 20,000+ Malicious IPs

SentinelOne, a cybersecurity firm, disclosed it thwarted multiple cyberattacks linked to China over the past year. These attacks, attributed to China-backed threat actors PurpleHaze and ShadowPad, targeted SentinelOne's infrastructure as well as more than 70 organizations worldwide across various sectors. The attackers exploited zero-day vulnerabilities in SAP and network systems, deploying advanced tools not previously observed in state-sponsored operations. Concurrently, Microsoft addressed 67 security vulnerabilities, including a zero-day WEBDAV flaw exploited by the Stealth Falcon group to execute remote code via phishing URLs. In a separate global operation led by INTERPOL involving 26 countries, over 20,000 malicious IP addresses and domains associated with 69 information-stealing malware strains were dismantled. This crackdown resulted in the arrest of 32 individuals and the seizure of 41 servers used for phishing, fraud, and scams. Japan contributed by neutralizing 129 infected servers domestically as part of this international effort.

#SentinelOne #China #PurpleHaze #ShadowPad #SAP #Microsoft #Stealth Falcon #INTERPOL #Japan

Written with ChatGPT (GPT-4).

Sources

Additional media

Image #1 for story sentinelone-foils-china-linked-purplehaze-attacks-exploiting-zero-day-flaws-67-1326e3b9