Ongoing state-sponsored cyber espionage campaign via vulnerable edge devices

Earlier this year, the NCSC, in collaboration with the Dutch Military Intelligence and Security Service (MIVD) and the Dutch General Intelligence and Security Service (AIVD), published a report on advanced COATHANGER-malware targeting FortiGate-systems. The MIVD has continued its investigation into the associated Chinese cyber espionage campaign, which has proven to be far more extensive than previously acknowledged. In response, the NCSC is calling for heightened vigilance regarding this campaign and the exploitation of vulnerabilities in edge devices. To support this effort, the NCSC has developed a factsheet detailing information on edge devices, associated challenges, and recommendations.