Chinese Hacking Groups Accused of Targeting Top US Govt Officials and Military

Chinese Hacking Groups Accused of Targeting Top US Govt Officials and Military.

Western intelligence agencies and cybersecurity firms have accused Chinese hacking groups of engaging in digital intrusion campaigns worldwide, targeting government and military organizations, corporations, and media groups.

While Chinese authorities consistently deny any state-sponsored hacking, cybersecurity experts believe many of these groups are backed by the Chinese government.

Some of the recently identified Chinese hacking teams include:

STORM-0558: Since May, this group has been secretly accessing email accounts at approximately 25 organizations, including US government agencies and Microsoft. U.S. Commerce Secretary Gina Raimondo and US envoy to China Nicholas Burns were among those targeted.

VOLT TYPHOON: Western intelligence agencies and Microsoft reported that this state-sponsored group has been spying on US critical infrastructure organizations, including telecommunications and transportation hubs.

BACKDOORDIPLOMACY: A Reuters report identified BackdoorDiplomacy as responsible for widespread digital intrusions against Kenyan ministries and state institutions over several years. Chinese authorities denied knowledge of such hacking.

APT 41: Also known as Wintti, Double Dragon, and Amoeba, this group has conducted government-backed cyber intrusions and financially motivated data breaches. They were linked to stealing tens of millions of dollars in the US

COVID-19 relief benefits between 2020 and 2022.

APT 27: This state-sponsored hacking team has launched multiple attacks on Western and Taiwanese government agencies. They claimed responsibility for cyberattacks against Taiwan during a visit by then-US House Speaker Nancy Pelosi in 2022.

Despite the mounting evidence and accusations, Chinese authorities have consistently refuted these reports, labeling them as “groundless accusations.”