Sophos

Sophos, a UK cybersecurity firm, experienced a breach initiated by a Chinese hacker group that exploited vulnerabilities in their network security devices. The targeted attacks lasted over five years, compromising firewalls to gather intelligence and infiltrate a range of high-profile targets, including nuclear energy, military institutions, government agencies, and critical infrastructures across Asia, Europe, the Middle East, and the US. The severity of the incident was amplified by the strategic use of zero-day vulnerabilities and the attackers' focus on critical sectors, suggesting potential large-scale disruption and intelligence gathering for state-sponsored activities.

Source: https://www.wired.com/story/sophos-chengdu-china-five-year-hacker-war/

TPRM report: https://scoringcyber.rankiteo.com/company/sophos

"id": "sop000110124",
"linkid": "sophos",
"type": "Vulnerability",
"date": "10/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Technology',
                        'location': 'UK',
                        'name': 'Sophos',
                        'type': 'Cybersecurity Firm'}],
 'attack_vector': 'Network Security Devices',
 'description': 'Sophos, a UK cybersecurity firm, experienced a breach '
                'initiated by a Chinese hacker group that exploited '
                'vulnerabilities in their network security devices. The '
                'targeted attacks lasted over five years, compromising '
                'firewalls to gather intelligence and infiltrate a range of '
                'high-profile targets, including nuclear energy, military '
                'institutions, government agencies, and critical '
                'infrastructures across Asia, Europe, the Middle East, and the '
                'US. The severity of the incident was amplified by the '
                "strategic use of zero-day vulnerabilities and the attackers' "
                'focus on critical sectors, suggesting potential large-scale '
                'disruption and intelligence gathering for state-sponsored '
                'activities.',
 'impact': {'operational_impact': 'Potential Large-Scale Disruption',
            'systems_affected': 'Firewalls'},
 'initial_access_broker': {'entry_point': 'Network Security Devices',
                           'high_value_targets': ['Nuclear Energy',
                                                  'Military Institutions',
                                                  'Government Agencies',
                                                  'Critical Infrastructures'],
                           'reconnaissance_period': 'Over Five Years'},
 'motivation': 'Intelligence Gathering, State-Sponsored Activities',
 'threat_actor': 'Chinese Hacker Group',
 'title': 'Sophos Cybersecurity Firm Breach',
 'type': 'Cyber Breach',
 'vulnerability_exploited': 'Zero-day Vulnerabilities'}