Cyber intel firm warns Chinese hackers infiltrated India's power sector

A cyber intelligence company says it has found that hackers linked to China have infiltrated power systems and ports in India in a show of force and they have the ability to create disruptionsThe company Recorded Future warned As bilateral tensions continue to rise we expect to see a continued increase in cyber operations being conducted by Chinalinked groups such as RedEcho in line with national strategic interestsIn the report made available to IANS Recorded Future said that the intrusions pose significant concerns over potential prepositioning of network access to support Chinese strategic objectivesThe incursions could also be a precursor to kinetic escalation that is preparing for possible cyberattacks on infrastructure by planting malwareThe report said that the intruders into the Indian networks used a malware called ShadowPad to set up a backdoor for them to enter the system which was also used by other Chinese espionage teamsThe RedEcho group linked to the intrusions into India shared characteristics with Chinese groups APT41Barium and Tonto Team the report notedIt said that in September the US government filed charges against five Chinese APT41 and linked it to the front company Chengdu 404 Network TechnologyThe report said One of the accused previously claimed to be very close to the MSS Chinese Ministry of State Security continuing an established trend of Chinese private contractors and front companies conducting cyber espionage activity on behalf of the MSS Conversely Tonto Team has been linked to the PLA Peoples Liberation Army specifically the Shenyang Military Region Technical Reconnaissance BureauRecorded Future linked the intrusions to the recent border tension between the two countries and identified ten Indian power generation and transmission organisations and two ports that it said were targetedThe company said that it had notified the appropriate Indian government departments prior to publication of the suspected intrusions to support incident response and remediation investigations within the impacted organisationsThe report said that India was also involved in cyber espionage and that it had observed the suspected Indian statesponsored group Sidewinder target Chinese military and government entities in 2020Even though India and China recently agreed to deescalate the border tensions cyber operations continue to provide countries with a potent asymmetric capability to conduct espionage or preposition within networks for potentially disruptive reasons the report saidRecorded Future said that the critical Indian infrastructures targeted have limited economic espionage opportunities and therefore they pose significant concerns that they were being set up for Chinas strategic objectivesThe regional load despatch centres LDC for southern western eastern and northeastern regions the state LDCs in Delhi and Telangana the National Thermal Power Corporations Kudgi super thermal power station in Karnataka were targeted according to Recorded FutureThe LDCs coordinate the distribution and transmission of power and ensure the smooth availability of electricityThe two ports are the Mumbai Port Trust and VO Chidambaranar Port in Thoothukudi Tamil Nadu according to the reportIn October there was a massive power outage in Mumbai because the Padgha Load Despatch Centre in Thane District had tripped The Recorded Future report noted that local media had linked it to malware found at the facilityThis story has been sourced from a third party syndicated feed agencies Midday accepts no responsibility or liability for its dependability trustworthiness reliability and data of the text Midday managementmiddaycom reserves the sole right to alter delete or remove without notice the content in its absolute discretion for any reason whatsoever