Chinese hackers may have targeted Zoho, says US cyber security firm

Enterprise software maker Zoho was targeted by hackers, possibly of Chinese origin, who exploited a vulnerability in its self-serve password management tool ManageEngine from late September to early October, according to a blog post by Palo Alto Networks.

The US-based cyber security firm’s Unit 42 said last week that the hackers exploited the known vulnerability to successfully infiltrate at least nine global organisations in critical sectors such as defence, energy, healthcare, education and technology.

The attack, which it said began on September 22 and likely continued until early October, targeted at least 370 of Zoho’s ManageEngine servers in the United States.