2026-11-01
The official WeChat account of the Chinese Embassy in Panama issued a statement responding to accusations of cyber espionage made by the U.S. Ambassador, using colloquialisms such as 'Are we going to stop farming just because we hear the cicadas chirping?'
2026-10-29
On October 29, the campaign team for DPP Taipei mayoral candidate Shen Po-yang stated that their official campaign website and a newly launched road adoption site were hit by cyberattacks, with the latter receiving over 70,000 fake entries within an hour. The team has cleared the backdoor programs, updated the system, and strengthened defenses, and the websites have resumed normal operation.
2026-10-21
On October 21, Microsoft released a report stating that Storm-0940, a hacking group linked to the Chinese government, has been using the AI tool ARTEX since September to breach Microsoft 365 systems with credentials from the cloud backup application of U.S. IT service provider ConnectWise, attacking hundreds of government, military, semiconductor, and think tank organizations worldwide. In some attacks, high-level cloud privileges were obtained in under three hours. ConnectWise has acknowledged the security incident and is restoring services in phases.
2026-10-16
On October 16, 2026, the International Alliance of the Chinese Democratic Party issued a formal protest, accusing the Chinese government and the Xi Jinping criminal group of conducting cyberattacks and account hijacking against them, sparking widespread attention and condemnation both at home and abroad.
2026-10-15
Latvian Prime Minister Andris Kulbergs made public remarks, pointing out that the current efforts to counter the propaganda Russia spreads everywhere are insufficient, and warning that modern social media combined with new artificial intelligence technology are easily influencing people's minds. He also mentioned that Ukraine attacked three Yandex centers, which drew attention and discussion on social media.
2026-10-15
According to a report by Radio France Internationale, after the United States warned that Fiji had been hacked by Chinese hackers, the Fijian government announced on Wednesday (October 15) that it would establish a cooperative relationship with New Zealand's intelligence agencies, conduct a reassessment of its own relevant institutions, and carry out intelligence sector reforms.
2026-10-14
At 22:30 Beijing time on October 14, 2026, user @jielijian posted a tweet stating that the CCP cyber army has continued to attack the core group of the International Alliance of Chinese Democracy, stealing accounts and destroying and wiping out members' information, in an attempt to maliciously report and get accounts banned. The user called on everyone to stay vigilant and not click on unknown links carelessly.
2026-10-13
On October 13, 2026, the U.S. Department of Justice announced the dismantling of a spy case involving a North Korean computer farm and indicted 14 people connected to the case. According to the charges, the criminal network spanned 17 U.S. states, and the suspects were charged with wire fraud, money laundering, and identity theft, among other crimes. Of the 14 indicted, 10 are Chinese nationals. The gang operated computer farms through illegal means, seriously threatening U.S. national security.
2026-10-07
The U.S. State Department's Rewards for Justice program announced a reward of up to $10 million for information on the identity and whereabouts of hacker Zhang Yu from Shanghai, China, accusing him of alleged cyberattacks and theft of research data.
Location: Washington, United States ·
Importance IV ·
Verification: Official claim ·
View causal chain →
2026-10-08
Six countries including the UK and the US issued a 58-page joint report accusing China's Beijing Yongxin Zhicheng Technology Group of assisting cyberattacks against global institutions and stealing sensitive data; the Chinese embassy in the UK firmly denied the accusations.
Location: London, United Kingdom ·
Importance IV ·
Verification: Reported ·
View causal chain →
2026-10-07
On October 7, the Dutch Military Intelligence and Security Service jointly issued a cybersecurity advisory, warning that attacks by Chinese hackers on edge devices such as firewalls and VPN gateways will increase sharply, saying that they use AI to discover vulnerabilities faster, and that Dutch agencies have also been breached multiple times.
2026-10-07
On October 7, cybersecurity firm CrowdStrike released an investigation report stating that from late September to early October, multiple financial institutions in South Korea suffered cyberattacks and data breaches. The attackers used the ARTEX tool developed in China in combination with AI models such as DeepSeek and Zhipu GLM, and are suspected to be students at South China University of Technology, after personal information was leaked through exposed Claude session records on a server.
2026-09-24
On September 24, the New Zealand National Cyber Security Centre released its annual cyber threat report, stating that China is the most persistent and capable state actor conducting cyber activities in New Zealand among the listed countries. Of the 369 major cyber incidents handled between July 2025 and June 2026, 86 were suspected to be related to state-sponsored actors, and the China-backed "Salt Typhoon" organization was named.
2026-09-15
On September 15, Tahir Imin, founder of the Uyghur Times, testified at a U.S. Congressional hearing, revealing that the media outlet had been subjected to massive traffic attacks and harassment by spoofed websites. An Anthropic report indicated that actors used Claude AI to orchestrate smear campaigns and reporting against the outlet's journalists, and exploited the vulnerabilities of the families of Uyghurs living abroad to issue threats.
2026-09-16
On September 16, The Wall Street Journal disclosed that Zhengzhou Zhirong Network Technology Company used AI technology to organize stolen foreign government classified data and sold intelligence to the Chinese public (Public Security) organs, involving secrets of countries such as Russia, the Philippines, Pakistan, and the Vatican.
2026-09-16
According to internal materials obtained by The Wall Street Journal, the data held by ZRON covers Russian diplomatic cables, meeting preparation documents between Philippine officials and the U.S. National Security Council, classified meeting minutes from the Pakistani Prime Minister's Office, and Vatican diplomatic communications.
2026-09-02
On September 2, US Attorney General Blanche said that this week Chinese cybercriminals attempted to launch a password reset attack against hundreds of thousands of Twitter users. Twitter intercepted it in time, preventing accounts from being compromised, and the Department of Justice is pursuing those involved.
2026-08-27
The U.S. Department of Justice and the FBI announced on Wednesday the seizure of the domain names for two hacking platforms, Qscan and QT Router, alleging they were operated by the Chinese hacking group QTFY and served the Ministry of State Security and the military of China.
2026-08-17
US and South Korean officials announced that joint military exercises will be held from August 17 to 27, incorporating for the first time responses to drones, GPS jamming, and cyberattacks.
2026-08-12
According to reports, after Chinese dissident Liu Xiaobo was awarded the Nobel Peace Prize, Norwegian institutions related to the prize were immediately attacked.
2026-08-09
On August 10, 2026, British media revealed that the camera of the Royal Navy's special forces K3 reconnaissance unmanned vessel contains components made in China and has been continuously sending heartbeat communications to IP addresses within China; the UK Ministry of Defence has urgently cut off the network connection.
2026-07-30
The White House Transparency Task Force released a fact sheet stating that China and its proxies obtained data on as many as 220 million US voters through hackers and other means.
Location: Washington, United States ·
Importance IV ·
Verification: Official claim ·
View causal chain →
2026-07-16
Trump claimed that serious vulnerabilities exist in U.S. vote-counting machines, voting machines, central ballot collection systems, polling places, and related websites, which could be infiltrated by foreign powers.
2026-07-14
On July 14, 2026, Canadian media revealed that the Communications Security Establishment carried out a disruptive cyber countermeasure operation against an overseas cybercrime ring engaged in the cross-border trafficking of fentanyl chemical precursors.
2026-07-09
On July 9, 2026, cybersecurity company SentinelOne released a report disclosing that multiple hacker groups linked to the Chinese government had launched cyberattacks against Pakistani law enforcement agencies.
2026-07
The U.S. Embassy in Fiji said that hackers linked to China gained access to the network of a Fiji-based regional organization for several consecutive days between July and August this year; China denied the allegation.
2026-06-21
On June 21, the Ministry of State Security of the Chinese Communist Party issued a warning stating that overseas spy agencies are using online pop-up advertisements to conduct intelligence collection and ideological infiltration.
2026-06-09
US cybersecurity company CrowdStrike released an investigation report pointing out that, as investment in the field of artificial intelligence surges, the greatest intelligence-probing threat faced by technology companies worldwide over the past year has come from hackers linked to the Chinese government.
2026-04-25
The U.S. Department of Justice announced that 34-year-old Chinese national Xu Zewei has been extradited from Italy to the United States, where he faces nine charges including wire fraud, and is accused of carrying out cyberattacks under the direction of the Shanghai State Security Bureau.
2026-04-23
On June 15, 2026, the University of Toronto's Citizen Lab released a research report disclosing that commercial spyware vendors exploit vulnerabilities in global telecommunications network interconnections to conduct long-term targeted tracking of journalists, politicians, and dissidents.
2026-03
The Uyghur Post revealed that its website was subjected to sustained traffic attacks in March 2026, with daily requests peaking at 185.68 million.
2026
The Ministry of State Security reported that a government agency's office terminals were not regularly scanned for viruses, and its work email was subjected to cyberattacks by overseas anti-China hostile forces. It also disclosed cases in which research institutes and companies had data stolen and their hosts compromised because their antivirus software stopped receiving updates, and urged all units to fulfill their cybersecurity protection responsibilities.
2025-03
The House Select Committee on the CCP has launched an investigation into the U.S. subsidiaries of China Telecom, China Mobile, and China Unicom, and will hold hearings on Chinese cyber espionage operations.
Location: Washington, United States ·
Importance IV ·
Verification: Verified ·
View causal chain →
2024-11-13
The FBI and CISA state that hackers linked to the Chinese government have infiltrated several US telecommunications companies, stealing call records and private communications, and replicating wiretap request information.
2023-11
The South Korea National Cyber Security Center revealed that 18 Korean-language websites have been disguised as local South Korean news media, with an operation style highly similar to fake news websites discovered in Italy.
2023
In 2023, Chinese hackers breached the U.S. Navy's Undersea Warfare Center, stealing submarine operations and military technology materials.
2021
In 2021, Microsoft Exchange was attacked by the Chinese government, and tens of thousands of institutions in government, academia, defense and industry were affected.
2017
In 2017, the financial data of about 147 million Americans was leaked from a U.S. credit reporting agency, and the U.S. Department of Justice subsequently charged four People's Liberation Army officers with taking part in the operation.
2015
In 2015, about 80 million medical records were stolen from the second-largest health insurance company in the United States, cited as one of the cases linked to a China-backed information theft campaign.
2010-01-12
In mid-December 2009, Google reported a hacker attack from China, saying the attackers attempted to steal Google's internal information and the Gmail accounts of dissidents. The operation was later called Operation Aurora, and China's Ministry of Foreign Affairs denied it.