{"id":11486,"date":"2024-11-26T15:28:15","date_gmt":"2024-11-26T14:28:15","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=11486"},"modified":"2025-08-18T13:16:09","modified_gmt":"2025-08-18T11:16:09","slug":"operacion-sophos-pacific-rim","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/","title":{"rendered":"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \u00abAPTs\u00bb de origen Chino"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"11486\" class=\"elementor elementor-11486\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1d7d9d8 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1d7d9d8\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ea21a11\" data-id=\"ea21a11\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8dd2dbb elementor-widget elementor-widget-text-editor\" data-id=\"8dd2dbb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3>Sophos X-Ops lleva m&aacute;s de cinco a&ntilde;os investigando a varios grupos con base en China que atacan los firewalls de Sophos con botnets, nuevos exploits y malware a medida.<\/h3><p>Sophos, reconocida empresa l&iacute;der en soluciones de ciberseguridad, ha publicado el informe &ldquo;Pacific Rim&rdquo;, donde detalla las acciones defensivas y ofensivas que llev&oacute; a cabo en los &uacute;ltimos cinco a&ntilde;os contra m&uacute;ltiples actores vinculados a estados-naci&oacute;n chinos. Estos adversarios dirigieron sus ataques a dispositivos perimetrales, como firewalls Sophos, empleando campa&ntilde;as con exploits in&eacute;ditos y <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/malware\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>malware<\/a> personalizado que integraban herramientas para espionaje, sabotaje y vigilancia. Adem&aacute;s, usaron t&aacute;cticas, t&eacute;cnicas y procedimientos (TTP) que coincid&iacute;an con los utilizados por grupos chinos conocidos como Volt Typhoon, APT31 y APT41. Los objetivos incluyeron infraestructuras cr&iacute;ticas y entidades gubernamentales de diferentes tama&ntilde;os, principalmente en el sur y sudeste de Asia, como centrales nucleares, aeropuertos, hospitales militares, organismos de seguridad del Estado y ministerios.<\/p><p>Durante esta operaci&oacute;n, denominada Pacific Rim, Sophos X-Ops, la divisi&oacute;n de inteligencia de amenazas y ciberseguridad de Sophos, se centr&oacute; en contrarrestar las acciones de estos adversarios, ajustando continuamente sus estrategias de defensa y contraataque. Aunque Sophos logr&oacute; contener los ataques iniciales, los atacantes aumentaron su agresividad y recurrieron a operadores m&aacute;s sofisticados, lo que llev&oacute; a Sophos a identificar un complejo ecosistema de adversarios interconectados.<\/p><p>Desde 2020, Sophos comenz&oacute; a divulgar informaci&oacute;n sobre campa&ntilde;as espec&iacute;ficas relacionadas con la operaci&oacute;n, como Cloud Snooper y Asnar&ouml;k. Ahora, con este nuevo informe, busca destacar la persistencia de estos actores vinculados a estados-naci&oacute;n chinos y su enfoque en comprometer dispositivos perimetrales sin actualizaciones o en fin de vida &uacute;til (EOL). Frecuentemente, los atacantes aprovecharon vulnerabilidades <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/zero-day\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>zero-day<\/a> desarrolladas para estos dispositivos. Sophos insta a todas las organizaciones a implementar parches de seguridad de manera inmediata y a reemplazar dispositivos obsoletos por modelos actuales. Adem&aacute;s, subraya que sus productos reciben actualizaciones regulares en respuesta a las amenazas emergentes para proteger a sus clientes, quienes, en el caso de Sophos Firewall, cuentan con actualizaciones autom&aacute;ticas habilitadas por defecto.<\/p><h2>Aspectos destacados de la operaci&oacute;n<\/h2><ul><li>En diciembre de 2018, un incidente curioso marc&oacute; un punto de partida importante. Un ordenador conectado a una pantalla de proyecci&oacute;n comenz&oacute; a escanear la red en las oficinas de Cyberoam en India, una empresa adquirida por Sophos en 2014. Al investigarlo, se descubri&oacute; un payload malicioso que monitoreaba el tr&aacute;fico especializado de Internet de manera silenciosa. Este inclu&iacute;a una sofisticada <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/puerta-trasera\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">puerta trasera<\/a> y un rootkit avanzado conocido como &laquo;Cloud Snooper&raquo;.<\/li><\/ul><ul><li>Varios reportes, en abril de 2020, instituciones se&ntilde;alaron una interfaz de usuario que dirig&iacute;a a un dominio relacionado con Sophos. Esto llev&oacute; a una colaboraci&oacute;n con fuerzas de seguridad europeas, quienes lograron localizar y desmantelar el <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/servidor\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>servidor<\/a> utilizado por los atacantes para distribuir cargas maliciosas en una operaci&oacute;n denominada Asnar&ouml;k. Sophos no solo neutraliz&oacute; esta <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/amenaza\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>amenaza<\/a> y la vincul&oacute; a China, sino que adem&aacute;s tom&oacute; control del canal de mando y control (C2), evitando as&iacute; m&uacute;ltiples oleadas de ataques <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/botnet\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>botnet<\/a> planeados.<\/li><\/ul><ul><li>Evoluci&oacute;n tras Asnar&ouml;k: En respuesta a las amenazas crecientes, Sophos fortaleci&oacute; sus operaciones de inteligencia con un programa enfocado en rastrear y detener actores de amenazas. Este programa utiliz&oacute; herramientas como inteligencia de c&oacute;digo abierto, an&aacute;lisis web, monitoreo de telemetr&iacute;a y estrategias avanzadas de implantes de kernel para anticiparse a los movimientos de los atacantes, quienes intentaban explotar dispositivos protegidos por Sophos.<\/li><\/ul><ul><li>Incremento de ataques: Con el tiempo, los adversarios perfeccionaron sus t&aacute;cticas, implementando malware m&aacute;s dif&iacute;cil de detectar. A pesar de esto, las capacidades avanzadas de rastreo de Sophos permitieron prevenir ataques significativos. Entre los logros destaca la obtenci&oacute;n de un bootkit UEFI y varios exploits personalizados antes de que pudieran ser desplegados masivamente.<\/li><\/ul><ul><li>Rastreo a v&iacute;nculos en China: M&aacute;s adelante, algunos ataques fueron rastreados hasta un grupo cibercriminal vinculado al Instituto de Investigaci&oacute;n Double Helix, de la regi&oacute;n de Chengdu en China, lo que ofreci&oacute; mayor claridad sobre los actores detr&aacute;s de estas amenazas.<\/li><\/ul><ul><li>Marzo de 2022: En el marco de un programa de recompensas, un investigador de seguridad report&oacute; una <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> zero-day, identificada como <a class=\"glossaryLink\"  href=\"https:\/\/www.infordisa.com\/soc\/glosario-definicion\/cve\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>CVE<\/a>-2022-1040. Tras investigar, se confirm&oacute; que esta brecha ya estaba siendo explotada en varias operaciones. Sophos logr&oacute; evitar que afectara a sus clientes, aunque el momento del aviso gener&oacute; sospechas sobre una posible conexi&oacute;n entre el informante y los atacantes, siendo esta la segunda ocasi&oacute;n en que ocurr&iacute;a algo similar.<\/li><\/ul><p>Estas situaciones reflejan la complejidad de las amenazas actuales y el esfuerzo constante por mantenerse un paso adelante de los adversarios.<\/p><p>En un entorno donde los adversarios no solo persisten, sino que evolucionan, las empresas deben priorizar la actualizaci&oacute;n de sus sistemas, implementar soluciones de seguridad robustas y adoptar una postura preventiva para adelantarse a las amenazas emergentes.<\/p><blockquote><p>&ldquo;Toda Seguridad es poca, toma conciencia.&rdquo;<\/p><\/blockquote>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ea779ad elementor-author-box--avatar-yes elementor-author-box--name-yes elementor-author-box--biography-yes elementor-author-box--link-no elementor-widget elementor-widget-author-box\" data-id=\"ea779ad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=300&amp;r=g\" alt=\"Imagen de Jordi Sala\" loading=\"lazy\"\/>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<div>\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\tJordi Sala\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\tMarketing\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Sophos X-Ops lleva m&aacute;s de cinco a&ntilde;os investigando a varios grupos con base en China que atacan los firewalls de Sophos.<\/p>\n","protected":false},"author":2,"featured_media":11488,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[39],"tags":[116,44,74,109],"class_list":["post-11486","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actualidad","tag-ciberataque","tag-ciberseguridad","tag-concienciacion","tag-sophos","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia &quot;APTs&quot; de origen Chino - INFORDISA \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Sophos X-Ops lleva m\u00e1s de cinco a\u00f1os investigando a varios grupos con base en China que atacan los firewalls de Sophos.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia &quot;APTs&quot; de origen Chino - INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Sophos X-Ops lleva m\u00e1s de cinco a\u00f1os investigando a varios grupos con base en China que atacan los firewalls de Sophos.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/\" \/>\n<meta property=\"og:site_name\" content=\"INFORDISA \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-26T14:28:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-18T11:16:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/Sophos-X-Ops-Infordisa.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/Sophos-X-Ops-Infordisa.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \u00abAPTs\u00bb de origen Chino\",\"datePublished\":\"2024-11-26T14:28:15+00:00\",\"dateModified\":\"2025-08-18T11:16:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/\"},\"wordCount\":840,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Sophos-X-Ops-.jpg\",\"keywords\":[\"ciberataque\",\"Ciberseguridad\",\"Concienciaci\u00f3n\",\"Sophos\"],\"articleSection\":[\"Actualidad\"],\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/\",\"name\":\"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \\\"APTs\\\" de origen Chino - INFORDISA \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Sophos-X-Ops-.jpg\",\"datePublished\":\"2024-11-26T14:28:15+00:00\",\"dateModified\":\"2025-08-18T11:16:09+00:00\",\"description\":\"Sophos X-Ops lleva m\u00e1s de cinco a\u00f1os investigando a varios grupos con base en China que atacan los firewalls de Sophos.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Sophos-X-Ops-.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Sophos-X-Ops-.jpg\",\"width\":1200,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/operacion-sophos-pacific-rim\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \u00abAPTs\u00bb de origen Chino\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"INFORDISA \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"INFORDISA \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \"APTs\" de origen Chino - INFORDISA \/ Security Operations Center","description":"Sophos X-Ops lleva m\u00e1s de cinco a\u00f1os investigando a varios grupos con base en China que atacan los firewalls de Sophos.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/","og_locale":"es_ES","og_type":"article","og_title":"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \"APTs\" de origen Chino - INFORDISA \/ Security Operations Center","og_description":"Sophos X-Ops lleva m\u00e1s de cinco a\u00f1os investigando a varios grupos con base en China que atacan los firewalls de Sophos.","og_url":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/","og_site_name":"INFORDISA \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2024-11-26T14:28:15+00:00","article_modified_time":"2025-08-18T11:16:09+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/Sophos-X-Ops-Infordisa.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/Sophos-X-Ops-Infordisa.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrito por":"Jordi Sala","Tiempo de lectura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \u00abAPTs\u00bb de origen Chino","datePublished":"2024-11-26T14:28:15+00:00","dateModified":"2025-08-18T11:16:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/"},"wordCount":840,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/Sophos-X-Ops-.jpg","keywords":["ciberataque","Ciberseguridad","Concienciaci\u00f3n","Sophos"],"articleSection":["Actualidad"],"inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/","url":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/","name":"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \"APTs\" de origen Chino - INFORDISA \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/#primaryimage"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/Sophos-X-Ops-.jpg","datePublished":"2024-11-26T14:28:15+00:00","dateModified":"2025-08-18T11:16:09+00:00","description":"Sophos X-Ops lleva m\u00e1s de cinco a\u00f1os investigando a varios grupos con base en China que atacan los firewalls de Sophos.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/#primaryimage","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/Sophos-X-Ops-.jpg","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2024\/11\/Sophos-X-Ops-.jpg","width":1200,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/operacion-sophos-pacific-rim\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"Operaci\u00f3n Sophos Pacific Rim: defensa y contraataque hacia \u00abAPTs\u00bb de origen Chino"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"INFORDISA \/ Security Operations Center","description":"Portal de Ciberseguridad","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"INFORDISA \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"INFORDISA \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"Marketing","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/11486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/comments?post=11486"}],"version-history":[{"count":5,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/11486\/revisions"}],"predecessor-version":[{"id":11628,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/posts\/11486\/revisions\/11628"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/media\/11488"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/media?parent=11486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/categories?post=11486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/wp-json\/wp\/v2\/tags?post=11486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}