Google Threat Intelligence Group (GTIG) said on Feb. 25 that Google and certain of its cybersecurity partners disrupted a global espionage campaign that the group confirmed had hacked 42 countries and suspects infected at least 20 more.
GTIG has tracked the group as UNC2814/Gallium since 2017 and suspects it to be Chinese.
“This prolific, elusive actor has a long history of targeting international governments and global telecommunications organizations across Africa, Asia, and the Americas,” the report reads.
The campaign is characterized by stealth tactics and the targeting of cloud-hosted products to disguise its traffic. The group stated that this campaign is distinct and separate from Salt Typhoon, a major Chinese regime-backed cyberespionage campaign….
Google Disrupts China-Tied Cyber Campaign That Hacked 42 Countries
