Intel / Asia

Real-time monitoring of security incidents, escalation signals and threat indicators across global hotspots, focusing on rapid alerts and emerging risk developments. Topic: Asia. Updated briefs and structured summaries from curated sources.
Inside China’s Cyber War Network
Inside China’s Cyber War Network
2026-01-13T16:00:06Z
Summary
China accounts for 80% of economic espionage cases charged by the U.S. Department of Justice since the 1990s. The documentary explores the clandestine battle between the U.S. and China in cyberspace, highlighting China's ambitions to become the world's leading power by 2049. It emphasizes the lack of clear rules in this ongoing cyber war, where China employs modern espionage techniques to steal secrets from strategic companies. The narrative traces the origins of Chinese cyber operations back to significant geopolitical events, such as the bombing of the Chinese embassy in Belgrade in 1999 and a military collision in 2001. These incidents catalyzed the emergence of Chinese hacker groups, marking the beginning of the Sino-American Hacker War. The documentary examines the motivations behind these attacks and the evolution of hacking culture in China. The documentary features interviews with key figures from the first Sino-American Hacker War, revealing the complex relationship between patriotic hackers and the Chinese government. It discusses how the state has sought to control these groups while also leveraging their capabilities for national interests. The portrayal of hackers as nationalists raises questions about the authenticity of their motivations and the influence of state control. China's entry into the World Trade Organization in 2001 marked a pivotal moment in its global economic role, closely tied to the evolution of its cyber capabilities. The documentary highlights the ongoing cyber conflict, with the U.S. accusing China of stealing intellectual property and trade secrets. Despite agreements to curb cyber-enabled theft, attacks have persisted, indicating deep-rooted motivations behind these actions.
Perspectives
Investigative documentary on China's cyber capabilities and espionage activities.
U.S. Perspective
  • Accuses China of being the primary source of economic espionage
  • Highlights the need for stronger measures against Chinese cyber threats
  • Claims that Chinas cyber operations are illegal and detrimental to global security
  • Emphasizes the importance of public attribution of cyber attacks to deter future incidents
  • Argues that bilateral agreements have failed to stop cyber-enabled theft
Chinese Perspective
  • Denies state involvement in hacking activities
  • Claims that accusations from the U.S. are politically motivated
  • Argues that the U.S. engages in similar espionage practices
  • Highlights the complexity of international cyber norms and espionage
Neutral / Shared
  • Acknowledges the ongoing nature of cyber attacks from various actors
  • Notes the challenges in attributing cyber attacks to specific countries
  • Recognizes the evolving landscape of cyber capabilities globally
Metrics
other
80%
percentage of economic espionage cases charged by the U.S. Department of Justice
This statistic highlights the significant role China plays in economic espionage against the U.S.
China represents 80% of the economic espionage cases that we have charged here at the Department since the beginning of the economic espionage statute back in the 1990s.
other
9 companies
number of strategic companies targeted by China
Targeting these companies indicates a focused effort on key economic sectors.
This group targeted at least nine companies, most of them are stock listed.
other
14 years
duration of Priscilla Moriocchi's expertise at the NSA
This experience underscores the depth of knowledge regarding cyber threats from China.
You worked for 14 years as an expert for the US National Security Agency?
other
20 years
timeframe to find websites of Chinese hacker organizations
This indicates the historical depth of cyber operations and the evolution of hacker groups.
To find the websites of these two organizations, you have to go back 20 years.
other
2001
China joining the World Trade Organisation
This event marked a significant shift in China's role in international trade.
In 2001, China changed not only their own history, but the history of the world.
other
six companies
victims of the cyber attacks
Identifying multiple victims highlights the scale of the cyber threat posed by Chinese hackers.
against six American victim companies.
arrests
3 have been arrested units
out of the indicted individuals
This highlights the challenges in prosecuting cyber criminals operating from China.
Of the 35 defendants, only three have been arrested.
convictions
1 has actually been convicted units
of the indicted individuals
This reflects the difficulties in achieving justice in international cyber crime cases.
while only one has actually been convicted.
Key entities
Companies
American victim companies • Area 1 • BASF • Chinese People's Liberation Army • Chinese computer company • Equifax • FBI • FIA • Henkel • IT group • IT group company • NASA
Countries / Locations
World
Themes
#cyber_operations • #escalation_risk • #information_warfare • #china_cyber • #china_cyber_attack • #china_espionage • #chinese_cyber_culture • #chinese_hackers • #chinese_military
Timeline highlights
00:00–05:00
China accounts for 80% of economic espionage cases charged by the U.S. Department of Justice since the 1990s.
  • China accounts for 80% of economic espionage cases charged by the U.S. Department of Justice since the 1990s
  • The internet has become a battleground for espionage, with no established rules governing the conflict
  • China aims to become the worlds leading power by 2049, coinciding with the 100th anniversary of the Peoples Republic
  • The U.S. has engaged in global espionage since the Cold War, but China is now a significant competitor in this arena
  • China has targeted at least nine strategic companies, most of which are publicly traded
  • Europe finds itself caught between the U.S. and China, struggling to navigate its diplomatic relationships
05:00–10:00
China's entry into cyberspace was catalyzed by significant international conflicts, notably the bombing of its embassy in Belgrade in 1999 and a military collision in 2001. These events marked the beginning of the Sino-American Hacker War, with Chinese hacker groups emerging as key players in cyber operations against the United States.
  • Chinas entry into cyberspace was marked by significant international conflicts, including the bombing of its embassy in Belgrade in 1999
  • The first notable Chinese cyber attacks occurred in response to the NATO operation and a 2001 collision involving US and Chinese military aircraft
  • The attacks were attributed to groups such as the China Eagle Union and the Hong Kong Union of China, marking the beginning of the Sino-American Hacker War
  • Priscilla Moriocchi, a former NSA expert, highlighted the unique use of the internet as a tool for political motivations by nation-states during this period
  • Archive.org serves as a historical resource, allowing access to the early websites of Chinese hacker groups from the early 2000s
  • The rise of Chinese hackers reflected a shift in national perception and the strategic use of the internet against the United States
10:00–15:00
The documentary examines the first Sino-American Hacker War and the motivations behind Chinese hacking culture. It highlights the tension between patriotic hackers and the Chinese government's interests, particularly in the context of cyber operations against the United States.
  • The documentary explores the first Sino-American Hacker War and its implications
  • An anonymous hacker, referred to as EGLE, discusses the motivations behind Chinese hacking culture
  • Chinas BBS (Bulletin Board System) played a significant role in the development of hacking in the country since 1997
  • EGLEs group, the China Eagle Union, targeted American military sites to promote Chinese nationalism
  • In May 2001, the Chinese government distanced itself from nationalist hackers, labeling their actions as illegal
  • The Peoples Daily condemned cyber attacks as unforgivable and likened them to cyber-terrorism
15:00–20:00
China's entry into the World Trade Organisation in 2001 marked a pivotal moment in its global economic role. The evolution of its cyber capabilities has been closely tied to state interests and the contributions of hackers.
  • China joined the World Trade Organisation in 2001, marking a significant shift in its global economic role
  • Hackers like Eagle were initially used to enhance Chinas cyber capabilities while maintaining economic respectability
  • A group of hackers demonstrated an autonomous disposition to serve the state with their cyber skills
  • Lyon, a hacker linked to the Chinese military, was recruited by Topsek, a company providing services to the Peoples Liberation Army
  • The Hong Kong Union of China has been involved in cybersecurity discussions, emphasizing the importance of IT development
  • Xi Jinping later formalized guidelines encouraging hackers to contribute to Chinas technological advancement
20:00–25:00
China's cyber capabilities are rapidly evolving, focusing on enhancing information security to protect its economy. The U.S.
  • Chinas cyber capabilities are rapidly evolving, with a focus on protecting its economy through enhanced information security
  • The demand for cybersecurity professionals in China has surged, leading to universities offering specialized programs
  • China aims to surpass the United States as the worlds largest economy by leveraging its cyber force to steal industrial secrets
  • U.S. officials allege that Chinese hackers are targeting American companies to gain competitive advantages
  • The U.S. Department of Justice has indicted five members of the Chinese Peoples Liberation Army for cyber security breaches
  • For the first time, the U.S. has publicly identified Chinese hackers, exposing their names and faces to hold them accountable
25:00–30:00
The US and China have agreed to refrain from cyber-enabled theft of intellectual property, yet attacks have continued despite this agreement. Charges have been announced against Chinese hackers for targeting US government agencies and Equifax, highlighting the ongoing cyber conflict.
  • The US and China agreed to refrain from cyber-enabled theft of intellectual property for commercial advantage
  • Edward Snowdens revelations have influenced perceptions of US surveillance practices
  • The agreement between US and Chinese leaders failed to stop cyber attacks, which continued unabated
  • Charges were announced against two Chinese hackers for targeting US government agencies and Equifax
  • From 2014 to mid-2021, 35 individuals were indicted for involvement in Chinese cyber espionage operations
  • Only three of the indicted individuals have been arrested, with one returning to China after 18 months in US custody