Signed, Sealed, Delivered: Comparing Chinese APTs
Cheryl Biswas analyzes decades of Chinese state-sponsored supply chain intrusions and economic espionage campaigns across global technology sectors.
Summary
A Long History of Software Supply Chain Intrusions
While software supply chain attacks have dominated recent headlines, state-sponsored cyber espionage groups have weaponized trusted vendor channels for over two decades.
Profiling Prominent Chinese APT Groups
Cheryl Biswas profiles leading Chinese threat groups (such as APT10, APT41, and Barium), analyzing their strategic focus on telecommunications, aviation, and software vendors.
Modus Operandi: Stolen Certificates and Trojanized Builds
Biswas examines key tradecraft patterns, including stealing code signing certificates, poisoning upstream software updates, and leveraging digital infrastructure for economic espionage.
Strategic Defense Against Multi-Stage Supply Chain Threats
The author provides enterprise defenders with threat modeling frameworks to assess vendor dependencies and audit third-party trust relationships.
Related talks
Creator Stage·25 min
Amelia Shapiro
Analyzes Chinese state-sponsored intelligence requirements and strategic cyber operations targeting the global healthcare and biotechnology sectors.
Main Stage·35 min
Andrew Brandt
Sophos researcher Andrew Brandt chronicles a five-year investigation into Chinese nation-state campaigns weaponizing zero-days against perimeter firewall appliances.
Main Stage·34 min
Michael Torres · Zane Hoffman
Provides an inside look at a massive operational relay network (ORB) of compromised IoT devices and routers used by Chinese APT actors to obfuscate cyber attacks.