The stolen data reportedly includes approximately 950MB of information, covering details of more than 600 users, over 8,000 customer profiles, and more than 10,000 contract orders — some involving key government departments. Additionally, about 6.2GB of critical project data, including cryptography research and development codes, was taken from the code management system.
CNCERT’s analysis revealed the tools of attack were technically linked to those previously used by U.S. intelligence agencies. Besides, the attacks mainly occurred during U.S. working hours and demonstrated sophisticated methods to evade tracing, including frequent IP switching and deletion of logs.
