Cybersecurity incident
Date: 2017-11-27 00:00:00
Affected organization: Siemens
Affected country: Germany
Industry: Manufacturing
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Industrial-Espionage
Actor: Ministry of State Security's (MSS) Guangdong State Security Department (GSSD) (APT3)
Actor type: Nation-State
Actor country: China
Description: The U.S. Department of Justice indicted three members of Boyusec, a China-based internet security firm, on charges including conspiring to commit computer fraud and abuse and conspiring to commit trade-secret theft. The victims included Moody's Analytics, Siemens, and Trimble. Though not mentioned in the indictment, Boyusec is believed to work on behalf of China's Ministry of State Security and be a front for APT3.