Cybersecurity incident — 2019-07-24 00:00:00
Affected organization: Marriott
Affected country: United States of America
Industry: Accommodation and Food Services
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Undetermined
Actor: People's Liberation Army Strategic Support Force (PLA Unit 61398)
Actor type: Nation-State
Actor country: China

A threat actor, believed to be the Chinese APT Winnti, used aTrojan horse to gain aremote backdoor access to German energy technology company Siemens, chemical firm BASF, and consumer goods company Henkel. Non-German companies Roche, Lion Air, and Marriott, among others, were also targeted.