(ECNS) — U.S. intelligence agencies have significantly intensified cyber espionage activities targeting China's defense and military-industrial sectors, posing severe threats to national security, according to a statement by the China Cyberspace Security Association on Friday.
The National Computer Network Emergency Response Technical Team/Coordination Center of China (CNCERT) reported that U.S. cyber operatives have conducted numerous attacks against Chinese military-related universities, research institutes, and enterprises. These operations aim to steal sensitive data related to defense research, design, and manufacturing processes.
Two recent cases have been highlighted to underscore the rising threat facing critical infrastructure.
In the first case, from July 2022 to July 2023, U.S. hackers exploited a zero-day vulnerability in Microsoft Exchange to infiltrate a major Chinese defense enterprise. The attackers successfully compromised the firm's domain controller and gained control of more than 50 internal devices, implanting tools to maintain long-term access and extract confidential data. Over 40 separate attacks were routed through proxy servers located in Germany, Finland, South Korea, and Singapore, compromising sensitive emails of 11 individuals, including senior executives.
In the second incident, occurring between July to November 2024, another Chinese defense firm specializing in the satellite and telecommunications field was also targeted. Attackers exploited vulnerabilities in the enterprise's document system to implant backdoors and trojans. By hijacking the system's software upgrade function to deploy spyware, they gained control of over 300 devices and stole classified data related to military networks.
Analysis shows these attacks were carried out by state-sponsored groups with strategic intentions, employing advanced techniques to evade detection and erase digital footprints. In 2024 alone, China reported more than 600 cyber incidents from foreign APT groups, with the defense sector identified as the primary target.
(By Evelyn)