People’s Republic of China-Linked Cyber Actors Hide in Router Firmware

This Joint Cybersecurity Advisory (CSA) was issued by the United States and international cybersecurity authorities. The authoring agencies have observed People’s Republic of China-linked cyber actors leveraging this exploitation of routers to pivot from global subsidiary companies to corporate headquarters networks in the US and Japan. Several specific detection and mitigation methods are provided in this CSA.