Cybersecurity incident
Date: 2019-07-24 00:00:00
Affected organization: Roche
Affected country: Switzerland
Industry: Undetermined
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Industrial-Espionage
Actor: People's Liberation Army Strategic Support Force (PLA Unit 61398)
Actor type: Nation-State
Actor country: China
Description: A threat actor, believed to be the Chinese APT Winnti, used aÃÆÃ'Ãâ 'ÃÆÃ¢â¬Â 'ÃÆÃ'ÃÂ¢Ã¢'Â¬ÃÂ 'ÃÆÃ'Ãâ 'ÃÆÃÂ¢ÃÂ¢'ÃÂ¬Ã'ÃÂ 'ÃÆÃ'Ãâ 'ÃÆÃ¢â¬Â '''ÃÆÃ'Ãâ 'ÃÆÃ¢â¬Â 'ÃÆÃ'ÃÂ¢Ã¢'Â¬ÃÂ ''ÃÆÃ'Ãâ 'ÃÆÃ¢â¬Â ''ÃÆÃ'Ãâ ''ÃÆÃ''ÃÆ'Ã'ÃÂ Trojan horse to gain aÃÆÃ'Ãâ 'ÃÆÃ¢â¬Â 'ÃÆÃ'ÃÂ¢Ã¢'Â¬ÃÂ 'ÃÆÃ'Ãâ 'ÃÆÃÂ¢ÃÂ¢'ÃÂ¬Ã'ÃÂ 'ÃÆÃ'Ãâ 'ÃÆÃ¢â¬Â '''ÃÆÃ'Ãâ 'ÃÆÃ¢â¬Â 'ÃÆÃ'ÃÂ¢Ã¢'Â¬ÃÂ ''ÃÆÃ'Ãâ 'ÃÆÃ¢â¬Â ''ÃÆÃ'Ãâ ''ÃÆÃ''ÃÆ'Ã'ÃÂ remote backdoor access to German energy technology company Siemens, chemical firm BASF, and consumer goods company Henkel. Non-German companies Roche, Lion Air, and Marriott, among others, were also targeted.