There’s news today of a BAE/PWC report detailing a Chinese-based hacking group campaign dubbed “Operation Cloud Hopper”.
Chinese Group Is Hacking Cloud Providers to Reach Into Secure Enterprise Networks https://t.co/Le4E4Se2Hc pic.twitter.com/adpDyWYa6C
— News from the Lab (@FSLabs) April 5, 2017
This operation is what’s known as an upstream attack, a method of compromise that we detailed in our State of Cyber Security 2017 report.
A stand-alone version of the (very informative) upstream attack article is now also available: The Weakest Link.

Article Link: https://labsblog.f-secure.com/2017/04/05/cloud-hopper-example-of-upstream-attack/