IndigoZebra hacking group suspected of targeting Afghan government

Conservative News DailyJuly 3, 2021

In this file photo taken on August 04, 2020, Prince, a member of the hacking group Red Hacker Alliance who refused to give his real name, uses his computer at their office in Dongguan, China’s southern Guangdong province. (NICOLAS ASFOURI/AFP via Getty Images)

OAN Newsroom
UPDATED 12:44 PM PT – Saturday, July 3, 2021

A new report said Chinese hackers may have been behind an attack on Afghanistan’s National Security Council.

Israeli cybersecurity firm Check Point reported on Thursday that a Chinese-speaking hacker group known as IndigoZebra is suspected of conducting ongoing cyberespionage against the Afghanistan government.

“This is the first major Chinese cyberespionage operation in Afghanistan to come to light, coming just weeks after Check Point reported on an earlier one targeting Uyghurs in China’s northwestern Xinjiang region as well as Pakistan,” noted VOA.

Today we unveil the technical details of a long-running operation by IndigoZebra APT:
* targeting high profile officials in Central Asia with spear-phishing emails
* #xCaon backdoor – ITW since at least 2014
* new #BoxCaon variant uses Dropbox API as C&C pic.twitter.com/cX2aCjvxBz

— Check Point Research (@_CPResearch_) July 1, 2021

The group is alleged to have sent documents from fake email addresses seemingly from the Afghan president to members of the Afghan nation’s security council. The emails were reportedly laced with malware.

This comes as countries and companies across the world have experienced an onslaught of cyberattacks.