The Dark Visitor

Another great post over at Dancho’s on who is behind the GPcode Ransomware.  Probably just an available proxy in Liaoning but worth keeping an eye to see if these groups eventually start working together:

The John Dow-ish Daniel Robertson is emailing from 58.38.8.211 (Liaoning Province Network China Network Communications Group Corporation No.156,Fu-Xing-Men-Nei Street, Beijing 100031), and Paul Dyke from 221.201.2.227(Liaoning Province Network China Network Communications Group Corporation No.156,Fu-Xing-Men-Nei Street, Beijing 100031), both Chinese IPs, despite that these campaigners are Russians.

Of course read the rest of this article but check out his other posts…fantastic!

So what can’t these guys find to turn a buck?  You got me.  Not going to write much on this ’cause I’ve got to check on a few personal records:

Foreign hackers, primarily from Russia and China, are increasingly seeking to steal Americans’ health care records, according to a Department of Homeland Security analyst.

They’ve been focused on the [Department of Defense] – the military – but now are spreading out into the health care private sector,” Walker said.

Read about it here, I’ve got a cold and need to call Beijing.

Hat-Tip: As always, Jumper

    Interesting article from SCmagazine on Chinese hackers filling the void after the Russian hackers packed up shop.  It doesn’t give enough detail to determine the particulars but raises a lot of questions.  Was this a voluntary surrender by the Russians?  Working in concert with one another?  Would love to hear more about it if anyone knows. 

Russian Hacker Move Out…And The Chinese Move in.

This article kind of hints around at a subject Jumper and I have been having on the link between Chinese and Russian hackers. The recent move of the Russian Hacker mob to China, along with this article showing both Chinese and Russian espionage in Germany, continues to suggest they are dancing around each other but never quite linked together.  For me it is just a gut feeling that they are linked. I haven’t found anything that shows the groups working together but…

Russia, China espionage in Germany