↑ J Chin, “Chinese Firm Behind Alleged Hacking Was Disbanded This Month”, (27 November 2017), The Wall Street Journal.Journal Publications: (Total Citations: 273, h-index: 9 Google Scholar 11/2015).

↑ “Advanced Persistent Threat Groups”, FireEye.

Charges Three Chinese Hackers Who Work at Internet Security Firm for Hacking Three Corporations for Commercial Advantage”, (27 November 2017).

↑ United States Department of Justice, “U.S.

↑ T Brewster, “Chinese Trio Linked To Dangerous APT3 Hackers Charged With Stealing 407GB Of Data From Siemens”, (27 November 2017), Forbes.

↑ Insikt Group, “Recorded Future Research Concludes Chinese Ministry of State Security Behind APT3”, (), Recorded Future.

↑ “APT3 is Boyusec, a Chinese Intelligence Contractor”, (), intrusiontruth.

17-247 in the United States District Court for the Western District of Pennsylvania”. All members of the group remain at large. Shortly after the publication of the indictment, Boyusec was disbanded. The indictment does not mention anything about a link to the Chinese government. The United States Department of Justice and the FBI issued an indictment against the group for computer hacking, theft of trade secrets, conspiracy and identity theft directed at employees and computers of the three corporate victims.

The actors attempted to hide their true identities and location by using aliases and intermediary computer servers known as 'hop points.' Ĭompromising emails and identity data of employees, theft of confidential business information, including trade secrets, and damage to victims’ computer systems. Īs concerns the attacks on the three corporates on which basis the indictment was imposed, to access to the victims’ networks, the group used either spearphishing emails or a backdoor designed to bypass the victims' security systems and firewalls. The group is one of the most sophisticated APT groups ever known and has used a wide range of tools and techniques. Moreover, the group is behind many other attacks on companies in the aerospace, defense, telecommunications, transportation, construction or advanced technology sectors as well as on government departments in Hong Kong, the United States and other States. On the basis of these attacks, the actors were investigated and charged by the United States authorities. The group hacked corporates Moody’s Analytics, Siemens AG and Trimble, Inc. Boyusec is believed to be APT3 (also known as UPS Team, Pirpi, Buckeye, Gothic Panda or TG-0110), acting as a contractor of the Chinese Ministry of State Security.

Wu Yingzhuo, Dong Hao and Xia Lei, who formed a China-based Internet security company Guangzhou Bo Yu Information Technology Company Limited (a.k.a. An indictment against the actors was issued on 13 September 2017.

Xia yu hao