Chinese-linked hacker group breached Indonesian spy agency’s networks
September 14, 2021 Leave a comment

A GROUP OF COMPUTER hackers with links to the Chinese state is likely behind a major breach of networks belonging to at least ten Indonesian government ministries and agencies, including the country’s primary intelligence service. The breach was first reported on September 10 by cybersecurity firm Insikt Group, whose researchers say they have been monitoring the hacks since April of this year.
Insikt Group said experts in its threat research division noticed that a number of PlugX malware command and control servers were regularly communicating with hosts inside the networks of the Indonesian government. After forensically examining the communication patterns, the researchers concluded that the initial contact between the command and control servers and the Indonesian government networks was made in March of this year, if not earlier. The technical details of the intrusion are still being determined, according to Insikt Group.
The firm said that the breach was perpetrated by Mustang Panda, a mysterious advanced persistent threat actor, which is also known as BRONZE PRESIDENT, HoneyMyte, and Red Lich. In the past, Mustang Panda has been particularly active in Southeast Asia, targeting servers in Mongolia, Malaysia and Vietnam. The targets of this latest breach included the Indonesian State Intelligence Agency, known as BIN. According to Insikt Group, BIN was “the most sensitive target compromised in the campaign”.
The company said it notified the Indonesian government twice about these intrusions, in June and July. Although no response was forthcoming from the Indonesian government, changes in its computer networks since that time may be taken as evidence that the authorities took steps to “identify and clean the infected systems”, according to Insikt Group’s report.
► Author: Ian Allen | Date: 14 September 2021 | Permalink


HIGH LEVEL DELEGATIONS OF intelligence officials from the United States and Russia visited India on the same day this week, for talks with Indian officials about the situation in Afghanistan, according to news reports. This development highlights the frantic pace with which Moscow and Washington are maneuvering around the region, following the dramatic takeover of Afghanistan by the Taliban last month.
THE DIRECTOR OF PAKISTAN’S powerful intelligence agency paid a surprise visit to the Afghan capital Kabul on Saturday, reportedly in an effort to mediate between rival factions of the Taliban. Lieutenant General Faiz Hameed, director of the Inter-Services Intelligence (ISI) directorate, was accidentally
THE CONSENSUS VIEW OF British intelligence in the weeks leading to the fall of Kabul to the Taliban was that the Afghan government would be challenged, but that the rebels were unlikely to take over the country in 2021. This was revealed on Wednesday in the House of Commons by Britain’s Foreign Secretary, Dominic Raab. 













CIA sees early signs of al-Qaeda regrouping in Afghanistan, says US official
September 15, 2021 by Joseph Fitsanakis 3 Comments
Now, however, with the Taliban back in power in Afghanistan, there are concerns that al-Qaeda may make a comeback in the war-torn country. Under the leadership of Osama bin Laden, al-Qaeda worked closely with the upper echelons of the Taliban in the 1990s and early 2000s. Contacts between the two groups continue to exist, and could potentially deepen following the exit of the United States and its Western allies from Afghanistan.
On Tuesday, David Cohen, who serves as deputy director of the CIA, said that American intelligence agencies are closely monitoring the situation. Speaking at the Intelligence and National Security Summit in Washington, DC, Cohen acknowledged that the shuttering of the United States embassy in Kabul, as well as the closure of a network of CIA stations across Afghanistan, had “diminished” the ability of American intelligence agencies to assess conditions on the ground. He added, however, that current intelligence reports indicate “some potential motion of al-Qaeda [returning] to Afghanistan”.
Cohen added that much of the intelligence that has been collected in recent weeks comes from “over-the-horizon platforms”, meaning that the collection is taking place from countries that border Afghanistan. However, the CIA in particular is already working to develop “methods to work within the horizon”, he said. At the moment, the United States intelligence community estimates that it could take al-Qaeda between one and two years to amass its former strike capability, so as to directly threaten American interests.
► Author: Joseph Fitsanakis | Date: 15 September 2021 | Permalink
Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with Afghan Taliban, Afghanistan, al-Qaeda, CIA, David Cohen, News, United States