Inside the Persistent Mind of a Chinese Nation-State Actor

The motivation behind Chinese APT groups have always been deeply rooted in nationalistic pride. Former Chairman Deng XiaoPing once stated, “It doesn't matter if a cat is black or white as long as it catches mice”. These words ring true in the series of targeted attacks launched by the Chinese APT groups throughout the years to gather intellectual property and conduct cyber espionage. But what does it take to build a nation-state actor? Indoctrination in the early years? A hiring system inbuilt into the education system? In this talk, I will explore the tactics, techniques and procedures utilised by Chinese APT groups to launch cyber-attacks, how hiring and recruitment works at a nation-state level and use examples from recent incident response engagements we’ve worked at Secureworks. Attendees will not only learn about how Chinese APT groups conduct attacks and the various tools and techniques they use – but they will gain an understanding from a psychological standpoint, the motivations behind these attacks and what drives the mind of a Chinese nation-state actor.

About the Speaker
Lina is a Principal Incident Responder at Secureworks, prior to Secureworks, Lina was the Incident Response and Threat Hunting Lead for Accenture Australia & New Zealand. Lina commenced her career working for an American cybersecurity start-up and also teaching cybersecurity at the University of Sydney. She has worked on multiple complex international cases covering various sectors such as defence, utilities, banking, resources and manufacturing. Lina currently holds the following certifications: GXPN, GREM, GCFA and OSCP.

View upcoming Summits: http://www.sans.org/u/DuS
Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE
#CTISummit