Intel / Cyber Operations
OSINT intel briefs, structured summaries, and trend signals. Topic: Cyber-Operations. Updated briefs and structured summaries from curated sources.
Inside China’s Cyber War Network
Full timeline
0.0–300.0
China accounts for 80% of economic espionage cases charged by the U.S. Department of Justice since the 1990s.
- China accounts for 80% of economic espionage cases charged by the U.S. Department of Justice since the 1990s
- The internet has become a battleground for espionage, with no established rules governing the conflict
- China aims to become the worlds leading power by 2049, coinciding with the 100th anniversary of the Peoples Republic
- The U.S. has engaged in global espionage since the Cold War, but China is now a significant competitor in this arena
- China has targeted at least nine strategic companies, most of which are publicly traded
- Europe finds itself caught between the U.S. and China, struggling to navigate its diplomatic relationships
- China is recognized as a cyber superpower, with significant digital espionage capabilities that are not going away
300.0–600.0
China's entry into cyberspace was catalyzed by significant international conflicts, notably the bombing of its embassy in Belgrade in 1999 and a military collision in 2001. These events marked the beginning of the Sino-American Hacker War, with Chinese hacker groups emerging as key players in cyber operations against the United States.
- Chinas entry into cyberspace was marked by significant international conflicts, including the bombing of its embassy in Belgrade in 1999
- The first notable Chinese cyber attacks occurred in response to the NATO operation and a 2001 collision involving US and Chinese military aircraft
- The attacks were attributed to groups such as the China Eagle Union and the Hong Kong Union of China, marking the beginning of the Sino-American Hacker War
- Priscilla Moriocchi, a former NSA expert, highlighted the unique use of the internet as a tool for political motivations by nation-states during this period
- Archive.org serves as a historical resource, allowing access to the early websites of Chinese hacker groups from the early 2000s
- The rise of Chinese hackers reflected a shift in national perception and the strategic use of the internet against the United States
- Candy Strandai is noted as a key expert on the first generation of Chinese hackers, emphasizing their technical skills and speed
- Research into these hackers revealed their aliases, real names, and backgrounds, including prominent figures like EGLE and Lion
600.0–900.0
The documentary examines the first Sino-American Hacker War and the motivations behind Chinese hacking culture. It highlights the tension between patriotic hackers and the Chinese government's interests, particularly in the context of cyber operations against the United States.
- The documentary explores the first Sino-American Hacker War and its implications
- An anonymous hacker, referred to as EGLE, discusses the motivations behind Chinese hacking culture
- Chinas BBS (Bulletin Board System) played a significant role in the development of hacking in the country since 1997
- EGLEs group, the China Eagle Union, targeted American military sites to promote Chinese nationalism
- In May 2001, the Chinese government distanced itself from nationalist hackers, labeling their actions as illegal
- The Peoples Daily condemned cyber attacks as unforgivable and likened them to cyber-terrorism
- Former British spy Nigel Inkster highlights the Chinese Communist Partys control over organizations and its view of independent hacker groups as threats
- The documentary emphasizes the tension between patriotic hackers and the Chinese governments interests
900.0–1200.0
China's entry into the World Trade Organisation in 2001 marked a pivotal moment in its global economic role. The evolution of its cyber capabilities has been closely tied to state interests and the contributions of hackers.
- China joined the World Trade Organisation in 2001, marking a significant shift in its global economic role
- Hackers like Eagle were initially used to enhance Chinas cyber capabilities while maintaining economic respectability
- A group of hackers demonstrated an autonomous disposition to serve the state with their cyber skills
- Lyon, a hacker linked to the Chinese military, was recruited by Topsek, a company providing services to the Peoples Liberation Army
- The Hong Kong Union of China has been involved in cybersecurity discussions, emphasizing the importance of IT development
- Xi Jinping later formalized guidelines encouraging hackers to contribute to Chinas technological advancement
- Jeff Moss, a prominent cybersecurity expert, launched a Chinese edition of the Defcon conference in 2018
- The rise of cyberspace in China is seen as critical to the countrys future success
1200.0–1500.0
China's cyber capabilities are rapidly evolving, focusing on enhancing information security to protect its economy. The U.S.
- Chinas cyber capabilities are rapidly evolving, with a focus on protecting its economy through enhanced information security
- The demand for cybersecurity professionals in China has surged, leading to universities offering specialized programs
- China aims to surpass the United States as the worlds largest economy by leveraging its cyber force to steal industrial secrets
- U.S. officials allege that Chinese hackers are targeting American companies to gain competitive advantages
- The U.S. Department of Justice has indicted five members of the Chinese Peoples Liberation Army for cyber security breaches
- For the first time, the U.S. has publicly identified Chinese hackers, exposing their names and faces to hold them accountable
- The FBI has issued wanted notices for Chinese hackers, marking a significant shift in the approach to cybercrime attribution
- In 2015, China and the U.S. agreed to halt the use of digital weapons for stealing trade secrets, reflecting international pressure
1500.0–1800.0
The US and China have agreed to refrain from cyber-enabled theft of intellectual property, yet attacks have continued despite this agreement. Charges have been announced against Chinese hackers for targeting US government agencies and Equifax, highlighting the ongoing cyber conflict.
- The US and China agreed to refrain from cyber-enabled theft of intellectual property for commercial advantage
- Edward Snowdens revelations have influenced perceptions of US surveillance practices
- The agreement between US and Chinese leaders failed to stop cyber attacks, which continued unabated
- Charges were announced against two Chinese hackers for targeting US government agencies and Equifax
- From 2014 to mid-2021, 35 individuals were indicted for involvement in Chinese cyber espionage operations
- Only three of the indicted individuals have been arrested, with one returning to China after 18 months in US custody
- The Chinese government provides a safe haven for cyber criminals as long as they remain in China
- The indictment of Chinese military hackers highlights the ongoing cyber conflict between the US and China
1800.0–2100.0
A Chinese hacker group named WinTi has targeted at least nine German companies, primarily in the technology sector. The stolen documents from the EU's Corrieu messaging system included warnings about Chinese ambitions in Africa, indicating significant geopolitical implications.
- A Chinese hacker group named WinTi has targeted at least nine German companies, primarily in the technology sector
- Victim companies include major names such as ZeeMens, BASF, and Henkel, which produce industrial adhesives and consumer products
- Despite inquiries, affected companies claim that no sensitive information was stolen, raising questions about the transparency of their responses
- Between 2015 and 2018, hackers stole thousands of diplomatic documents from the EUs Corrieu messaging system
- The Corrieu system is crucial for facilitating secure communication among EU member states regarding foreign policy
- Stolen documents included warnings about Chinese ambitions in Africa, highlighting the geopolitical implications of cyber espionage
- Experts suggest that the EU needs to reassess its strategy towards China, particularly in the context of Africa
2100.0–2400.0
A US cybersecurity firm, Area 1, reported a cyber attack on European diplomatic data attributed to Chinese hackers, who accessed sensitive documents through the Cypress Ministry of Foreign Affairs. The attack, characterized as generally unsophisticated, involved phishing to gain user credentials, with Area 1 claiming 100% confidence in the attribution to China.
- A US cybersecurity firm, Area 1, revealed a significant cyber attack on European diplomatic data attributed to Chinese hackers
- The hackers accessed sensitive documents by infiltrating the Cypress Ministry of Foreign Affairs rather than targeting the Corrieu system directly
- Aaron Fuckovitz, president of Area 1 and a former NSA hacker, claims 100% confidence in attributing the attack to China
- Phishing was identified as the initial method used by attackers to gain access to user credentials
- The attack was described as generally unsophisticated, contrasting with more complex cyber attack narratives often portrayed in media
- Area 1s investigation remains unconfirmed by other intelligence agencies regarding the Chinese origin of the attack
- A password used by the attackers, ZK 1980, was uncovered, indicating a method to avoid detection while gathering sensitive files
2400.0–2700.0
The investigation reveals a connection between a Chinese user, Love ZK 1980, and a company specializing in cyber espionage. The company seeks translators with a focus on current events and prioritizes hiring members of the Communist Party.
- The documentary investigates Chinas cyber capabilities and their global implications
- User Love ZK 1980 is identified on a popular Chinese forum, discussing military matters
- The 30th Department of the General Staff is highlighted as the branch specializing in cyber espionage
- A company linked to Love ZK 1980 is found, seeking translators for European languages
- The job description emphasizes the need for research and analysis skills related to current events
- The company prioritizes hiring members of the Communist Party
- A journalist poses as a candidate to confirm the companys existence and hiring needs
- The manager of the company has initials suspiciously similar to Love ZK 1980
- Attempts to contact the manager reveal a connection to Chinese ministries
2700.0–3000.0
China's cyber capabilities have raised concerns following a mass cyber attack that reportedly stole confidential European diplomatic documents. The European Union acknowledges ongoing cyber threats but faces challenges in attributing attacks to specific countries.
- An investigative documentary reveals Chinas extensive cyber capabilities and their global implications
- Confidential European diplomatic documents have reportedly been stolen in a mass cyber attack attributed to China
- A US company claims to have been targeted by a Chinese cyber attack, although definitive proof remains elusive
- The European Unions managing director for common security and defense policy acknowledges ongoing cyber threats
- Attribution of cyber attacks to specific countries is a complex process requiring consensus among all 27 EU member states
- The EU has identified potential perpetrators linked to a building in China but cannot disclose further details
- The EU official emphasizes that they are not too weak to confront cyber threats, despite the challenges in attribution
3000.0–3300.0
China is perceived as a cooperation partner, economic competitor, and systemic rival, necessitating a realistic engagement based on shared values. Despite the clear origins of cyber threats, European nations are downplaying the issue, while Washington calls for a more assertive response.
- China is viewed as a cooperation partner, economic competitor, and systemic rival
- Diplomatic language emphasizes the need for a realistic engagement with China based on shared values and interests
- Chinas cyber capabilities pose a significant threat to global security and diplomatic communications
- European nations are currently minimizing the issue of Chinese cyber espionage despite its clear origins
- Washington officials advocate for a more assertive European response to Chinese cyber activities
- There is a belief that ignoring or appeasing cyber threats will not lead to their resolution
- The urgency to establish rules governing cyber interactions with China is emphasized