Operation Soft Cell

Threat Actor updated 4 months ago (2024-05-04T20:35:23.046Z)
Download STIX
Preview STIX
Operation Soft Cell is a long-running cyber espionage campaign attributed to a Chinese threat actor, likely state-sponsored. The operation targets telecommunications providers globally and has been particularly active in the Middle East. The activity was first reported by cybersecurity firm Cybereason in June 2019, but according to their analysis, these malicious activities have been ongoing since at least 2012. The intrusion set shares tooling overlaps with other Chinese-aligned hacking efforts such as those tracked by Microsoft as Gallium and APT41. In March, SentinelLabs published an in-depth analysis of Operation Soft Cell, revealing its expansive reach over more than a decade. The operation has been linked to various Chinese hacking efforts focused on telecom targets worldwide. However, despite the similarities, conclusive attribution to a specific group or entity remains challenging, as noted by both Sentinel Labs and QGroup researchers. As of 2023, a Chinese cyber-espionage actor connected with Operation Soft Cell has continued to target Middle East telecom providers. This persistent targeting indicates the strategic value these entities hold for the threat actors. Overall, Operation Soft Cell represents a significant and ongoing threat to global telecommunications infrastructure, highlighting the need for robust cybersecurity measures within this sector.
Description last updated: 2024-05-04T18:33:58.199Z
What's your take? (Question 1 of 1)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Espionage
Chinese
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the Operation Soft Cell Threat Actor was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CERT-EU
a year ago
New threat intel effort to study 'undermonitered' regions
MITRE
2 years ago
Operation Soft Cell: A Worldwide Campaign Against Telecommunications Providers
MITRE
2 years ago
GALLIUM Expands Targeting Across Telecommunications, Government and Finance Sectors With New PingPull Tool
CERT-EU
a year ago
Stealthy hacks show advancements in China's cyberespionage operations, researchers say
InfoSecurity-magazine
a year ago
China-Aligned
Securityaffairs
a year ago
China-linked hackers target telecommunication providers in the Middle East
CERT-EU
a year ago
Operation Soft Cell: Chinese Hackers Breach Middle East Telecom Providers
CERT-EU
a year ago
Operation Tainted Love | ZDNet.de
CERT-EU
a year ago
SentinelOne beleuchtet Cyberspionage-Gruppe „Operation Tainted Love“ – Global Security Mag Online