China's Cyber Wolves Hunt F-35 Secrets While America Watches Iran: The Digital Heist You Missed

This is your Digital Frontline: Daily China Cyber Intel podcast. Hey listeners, Ting here on Digital Frontline: Daily China Cyber Intel. Buckle up, because in the last 24 hours, China's cyber wolves are circling US interests tighter than ever amid this wild US-Iran showdown. No major new malware drops like the Salt Typhoon crew's telecom hacks from last week, but Fire Chili, that notorious PLA Unit 69010 squad, ramped up spear-phishing against US defense contractors in the aerospace sector—think Boeing and Lockheed Martin analogs getting baited with fake Iranian missile intel lures. According to Mandiant's flash report, these attacks hit Virginia-based firms, probing for F-35 supply chain data to snag blueprints on bunker-busters just like the ones Trump bragged about obliterating Fordow and Natanz. Targeted sectors? Heavy focus on energy and critical infrastructure. Dragoon, aka Earth Lamia from Mustang Panda, scanned Texas oil refineries tied to ExxonMobil, mimicking the Kharg Island chaos where CENTCOM smoked 90 Iranian targets. CrowdStrike's OverWatch team flagged anomalous C2 traffic from Shanghai IPs tunneling through AWS proxies, aiming to map SCADA systems for potential Hormuz Strait disruptions—imagine blackouts syncing with Tehran's retaliation vows. Defensive advisories are screaming loud: CISA dropped an urgent bulletin echoing Microsoft's telemetry, warning of Volt Typhoon-style living-off-the-land tactics. Patch your Ivanti VPNs yesterday, folks—zero-days are still hot from that February exploit chain. Expert analysis from Recorded Future's Priscilla Moriuchi nails it: Beijing's accelerating ops to exploit US distractions, with 30% spike in scans on DoD networks since Trump's White House address. "China's not picking sides; they're picking pockets," she quipped in her webinar. Practical recs for you businesses and orgs: First, enable MFA everywhere, but go hardware keys like Yubikeys—phishers love SMS bypasses. Segment your networks with zero-trust; air-gap OT from IT if you're in energy. Hunt for Cobalt Strike beacons using EDR tools like SentinelOne—run YARA rules for Chinese TTPs daily. Train your peeps on recognizing lures themed around Iran strikes; no clicking "urgent Natanz leak" attachments. And rotate those certs—APT41 loves expired ones for lateral moves. Whew, that's the pulse from the digital trenches. Stay vigilant, encrypt everything, and ping me if your logs light up weird. Thanks for tuning in, listeners—subscribe now for daily drops so you don't get owned. This has been a Quiet Please production, for more check out quietplease.ai. For more http://www.quietplease.ai Get the best deals https://amzn.to/3ODvOta This content was created in partnership and with the help of Artificial Intelligence AI.