Chinese hacking group APT20 bypassing 2FA in latest wave of attacks
A hacking group linked to the Chinese state has been found bypassing two-factor authentication (2FA) security in a series of attacks targeting government organisations and managed service providers.
The activities of the group, believed to be APT20, were detailed in a report published last week by Dutch cyber security firm Fox-IT [PDF].
APT20 is believed to be a Chinese-government controlled group. It is thought to have targeted several universities, as well as healthcare, military, and telecoms companies between 2011 and 2014. The group then went dormant for a couple of years, as it changed its mode of operation, before resurging again in 2017, according to Fox-IT. In the past two years, APT20 has launched attacks against several government entities and managed service providers operating in fields like finance, healthcare, aviation, energy, insurance, and even gambling.
