Top stories.
- Chinese hackers infiltrate US law firm.
- EU Commission President warns about Russian attacks.
- Fancy Bear deploying LoJax malware.
Chinese hackers infiltrated a major law firm.
Williams & Connolly informed its clients that their computer systems had been infiltrated and that the attackers may have been able to access client emails. Sources believe that the attack may involve more than a dozen victims. The FBI's Washington field office is assisting in investigating the incident, and the law firm has engaged CrowdStrike and outside counsel Norton Rose Fulbright to assist with the response. Additionally, the firm stated that the intrusion has been contained.
Reportedly, the attackers accessed email accounts through a zero-day vulnerability. According to Mandiant, the campaign aligns with a larger Chinese espionage effort that is looking for intelligence on US national security and trade issues.
In a statement, the firm wrote:
"Importantly, there is no evidence that confidential client data was extracted from any part of our IT system, including from databases where client files are stored. We have taken steps to block the threat actor, and there is now no evidence of any unauthorized traffic on our networks."