Cybersecurity incident
Date: 2017-11-27 00:00:00
Affected organization: Moody's Analytics
Affected country: United States of America
Industry: Administrative and Support and Waste Management and Remediation Services
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of Data in Transit
Motive: Industrial-Espionage
Actor: Ministry of State Security's (MSS) Guangdong State Security Department (GSSD) (APT3)
Actor type: Nation-State
Actor country: China
Description: The U.S. Department of Justice indicted three members of Boyusec, a China-based internet security firm, on charges including conspiring to commit computer fraud and abuse and conspiring to commit trade-secret theft. The victims included Moody's Analytics, Siemens, and Trimble. Though not mentioned in the indictment, Boyusec is believed to work on behalf of China's Ministry of State Security and be a front for APT3.