Attack group affiliated with Chinese government used tools from NSA-linked Equation Group, new analysis suggests. Attack group Buckeye (a.k.a.a) commandeer a Windows zero-day and other tools from the NSA. The tools were used in attacks starting in March 2016, Symantec researchers say. Buckeye was carrying out espionage activity using allegedly U.S.-developed tools at least a year prior to the April 2017 Shadow Brokers leak, the firm says. Researchers said they weren t sure if Buckeye passed the tools off to another outfit or if it continued operating longer than they originally thought.
Source: https://threatpost.com/chinese-spies-stole-nsa-cyberweapons/144446/