q2K BHP
Black History Portal
THE BHP WIRE —
HIDDEN TRUTHS
What's New!
THE JOURNEY THROUGH TIME

Explore Black History

Explore the people, places, events, achievements, struggles and stories that shaped our journey.

✊🏾

Civil Rights

Movements, leaders, victories and the continuing fight for equality.

⚙️

Black Inventors

Innovation, patents, science, technology and world-changing contributions.

🏆

Sports

Pioneers, champions, Negro Leagues, records, activism and excellence.

♟️

People

Meet the people whose lives, choices and achievements shaped the journey.

📍

Places

Black towns, communities, institutions and places where history happened.

📜

Events

Moments that changed communities, movements, institutions and the nation.

Enter a person, place, event, or topic.
MY'STORY

The MOVE Fire

This is a personal recollection on the Move fire on May 13, 1985 Philadelphia police fired thousands of rounds at the MOVE house, city officials approved dropping an explosive device on the roof, the resulting fire was allowed to burn, 11 people—including five children—died, and 61 homes were destroyed. Philadelphia City Council later called it a “brutal attack carried out by the City of Philadelphia on its own citizens” and acknowledged that no individual faced criminal consequences for the bombing. One timeline correction worth preserving for the BHP record: the major previous MOVE-police confrontation was August 8, 1978, about seven years before the bombing, not a year or two earlier. Officer James Ramp was killed, other police and firefighters were wounded, nine MOVE members were later convicted, and television cameras recorded police beating Delbert Africa during his arrest. The 1985 MOVE Commission later specifically criticized city planners for failing to adequately use lessons from that 1978 confrontation. And that actually strengthens the point you’re making: 1985 did not happen without precedent or institutional memory. There had already been a deadly confrontation with MOVE, years of conflict, negotiations and police involvement before Osage Avenue.

MORE →
BLACK FACTS
The Truths They Never Taught You...

Katherine Johnson — Mathematics to the Moon

Katherine Johnson’s mathematical calculations helped guide some of America’s most important early space missions while she confronted the racial and gender barriers faced by Black women in twentieth-century America.

MORE →
BHP gathered finds from its connected research sources. Showing the 4 strongest Black History matches.
← BACK TO RESULTS
Wikipedia

Red Apollo

Red Apollo
Formationc. 2003–2005[1]
TypeAdvanced persistent threat
Region served
China
MethodsZero-days, Phishing, backdoor (computing), RAT, Keylogging
Official language
Chinese
Parent organization
Tianjin State Security Bureau of the Ministry of State Security
Formerly called
APT10
Stone Panda
MenuPass
RedLeaves
CVNX
POTASSIUM

Red Apollo (also known as APT 10 by Mandiant, MenuPass by FireEye, Stone Panda by Crowdstrike, and POTASSIUM by Microsoft)[1][2] is a Chinese state-sponsored cyberespionage group which has operated since 2006. In a 2018 indictment, the United States Department of Justice attributed the group to the Tianjin State Security Bureau of the Ministry of State Security.[3]

The team was designated an advanced persistent threat by FireEye, who reported that they target aerospace, engineering, and telecom firms and any government that they believe is a rival of China.

FireEye stated that they could be targeting intellectual property from educational institutions such as a Japanese university and is likely to expand operations into the education sector in the jurisdictions of nations that are allied with the United States.[4] FireEye claimed that they were tracked since 2009, however because of the low-threat nature they had posed, they were not a priority. FireEye now describes the group as "a threat to organizations worldwide."[4]

Tactics

[edit]

The group directly targets managed information technology service providers (MSPs) using RAT. The general role of an MSP is to help manage a company's computer network. MSPs were often compromised by Poison Ivy, FakeMicrosoft, PlugX, ArtIEF, Graftor, and ChChes, through the use of spear-phishing emails.[5]

History

[edit]

2014 to 2017: Operation Cloud Hopper

[edit]

Operation Cloud Hopper was an extensive attack and theft of information in 2017 directed at MSPs in the United Kingdom (U.K.), United States (U.S.), Japan, Canada, Brazil, France, Switzerland, Norway, Finland, Sweden, South Africa, India, Thailand, South Korea and Australia. The group used MSP's as intermediaries to acquire assets and trade secrets from MSP-client engineering, industrial manufacturing, retail, energy, pharmaceuticals, telecommunications, and government agencies.

Operation Cloud Hopper used over 70 variants of backdoors, malware and trojans. These were delivered through spear-phishing emails. The attacks scheduled tasks or leveraged services/utilities to persist in Microsoft Windows systems even if the computer system was rebooted. It installed malware and hacking tools to access systems and steal data.[5]

2016 US Navy personnel data

[edit]

Hackers accessed records relating to 130,000 US Navy personnel (out of 330,000).[6] Under these actions the Navy decided to coordinate with Hewlett Packard Enterprise Services, despite warnings being given prior to the breach.[7] All affected sailors were required to be notified.

2018 indictments

[edit]

A 2018 indictment showed evidence that CVNX was not the name of the group, but was the alias of one of two hackers. Both used four aliases each to make it appear as if more than five hackers had attacked.

Post-indictment activities

[edit]

In April 2019 APT10 targeted government and private organizations in the Philippines.[8]

In 2020 Symantec implicated Red Apollo in a series of attacks on targets in Japan.[9]

In March 2021, they targeted Bharat Biotech and the Serum Institute of India (SII), the world's largest vaccine maker's intellectual property for exfiltration.[10]

See also

[edit]

References

[edit]
  1. ^ "APT10 (MenuPass Group): New Tools, Global Campaign Latest Manifestation of Longstanding Threat". FireEye. Archived from the original on 2021-04-28. Retrieved 2021-03-07.
  2. ^ Kozy, Adam (2018-08-30). "Two Birds, One STONE PANDA". Archived from the original on 2021-01-15. Retrieved 2021-03-07.
  3. ^ "Two Chinese Hackers Associated With the Ministry of State Security Charged with Global Computer Intrusion Campaigns Targeting Intellectual Property and Confidential Business Information". United States Department of Justice. 2018-12-20. Archived from the original on 2021-05-01. Retrieved 2021-03-07.
  4. ^ a b "APT10 (MenuPass Group): New Tools, Global Campaign Latest Manifestation of Longstanding Threat « APT10 (MenuPass Group): New Tools, Global Campaign Latest Manifestation of Longstanding Threat". FireEye. April 6, 2017. Archived from the original on April 28, 2021. Retrieved June 30, 2019.
  5. ^ a b "Operation Cloud Hopper: What You Need to Know - Security News - Trend Micro USA". trendmicro.com. April 10, 2017. Archived from the original on June 30, 2019. Retrieved June 30, 2019.
  6. ^ "Chinese hackers allegedly stole data of more than 100,000 US Navy personnel". MIT Technology Review. Archived from the original on 2019-06-18. Retrieved 2019-06-30.
  7. ^ "US Navy Sailor Data 'Accessed by Unknown Individuals'". bankinfosecurity.com. Archived from the original on 2019-06-30. Retrieved 2019-07-12.
  8. ^ Manantan, Mark (September 2019). "The Cyber Dimension of the South China Sea Clashes". No. 58. The Diplomat. The Diplomat. Archived from the original on 17 February 2016. Retrieved 5 September 2019.
  9. ^ Lyngaas, Sean (17 November 2020). "Symantec implicates APT10 in sweeping hacking campaign against Japanese firms". www.cyberscoop.com. Cyberscoop. Archived from the original on 18 November 2020. Retrieved 19 November 2020.
  10. ^ N. Das, Krishna (1 March 2021). "Chinese hacking group Red Apollo (APT10) had identified gaps and vulnerabilities in the IT infrastructure and supply chain software of Bharat Biotech and the Serum Institute of India (SII), the world's largest vaccine maker". Reuters. Archived from the original on 3 May 2021. Retrieved 1 March 2021.

Source: Wikipedia. Article content is retrieved live through the MediaWiki API.

No preview image
Wikipedia

Red Apollo

Red Apollo (also known as APT 10 by Mandiant, MenuPass by FireEye, Stone Panda by Crowdstrike, and POTASSIUM by Microsoft) is a Chinese state-sponsored cyberespionage group which has operated since 2006. In a 2018 indictment, the United States Department of Justice attributed the group to the Tianjin State Security Bureau of the Ministry of State Security. The team was designated an advanced persistent threat by FireEye, who reported that they target aerospace, engineering, and telecom firms and any government that they believe is a rival of China. FireEye stated that they could be targeting intellectual property from educational institutions such as a Japanese university and is likely to expand operations into the education sector in the jurisdictions of nations that are allied with the United States. FireEye claimed that they were tracked since 2009, however because of the low-threat nature they had posed, they were not a priority. FireEye now describes the group as "a threat to organizations worldwide."

MORE →
Wikipedia

Parnassius epaphus

Parnassius epaphus, the common red Apollo, is a high altitude butterfly which is found in India and Nepal. It is a member of the snow Apollo genus (Parnassius) of the swallowtail family (Papilionidae). It is found from 9,000 to 13,000 feet (2,700 to 4,000 m) from Chitral District to Sikkim and western regions of Nepal. It is not considered rare.

MORE →
Wikipedia

Apollo Brown

Erik Vincent Stephens (born June 20, 1980), better known professionally as Apollo Brown, is an American record producer from Detroit, Michigan, United States. He is a member of the hip hop group Ugly Heroes (alongside Red Pill and Verbal Kent) and has released numerous collaborations with the likes of Guilty Simpson, O.C., Ras Kass, Skyzoo and Planet Asia.

MORE →
No preview image
Wikipedia

At the Apollo

At the Apollo is a live album and video release by English rock band Arctic Monkeys of the final concert of their 2007 world-tour, filmed in Manchester, England. It was filmed on super 16mm film and in surround-sound. It was directed by Richard Ayoade and photographed by cinematographer Danny Cohen (This Is England). It was edited by Nick Fenton (Heima, All Tomorrow's Parties), and produced by Diarmid Scrimshaw (Dog Altogether, Tyrannosaur). It has been awarded best music DVD 2009 by the NME. The music played in introduction credits was written by Bruno Nicolai, entitled 'Servizio fotografico' from the film The Red Queen Kills Seven Times starring Barbara Bouchet. The film premiered on UK television on the music channel 4Music on 19 February 2009. The DVD features a 'Multi Angle Camera View' of drummer Matt Helders.

MORE →
TOPIC OF THE DAY

Greenwood / Black Wall Street

Before the 1921 destruction of Tulsa’s Greenwood District, Black residents had created a remarkable center of business and community life. The district included stores, professional offices, entertainment venues and homes owned by Black citizens. Understanding Greenwood means learning what was built—not only what was burned.

MORE →
TRIVIA QUESTION OF THE DAY

Which heavyweight champion was known as the “Brown Bomber”?

Joe Louis.