Chinese‑linked cyber campaigns set sights on AI firms and Asian ministries, security firms report

Two independent cybersecurity firms have released detailed analyses indicating that coordinated hacking operations tied to China are targeting artificial intelligence companies and government agencies across Asia.

The reports describe separate but thematically linked campaigns. One of the most notable involved a spear‑phishing effort that masqueraded as communications from prominent Western AI researchers, luring recipients into revealing login credentials and installing malicious payloads.

Victims identified in the disclosures include emerging AI startups, university research labs, and ministries responsible for technology policy and national security. The attackers appear to be seeking a mix of proprietary algorithms, research data, and strategic policy documents that could give Chinese entities a competitive edge in the rapidly evolving AI sector.

Technical examinations of the malware show the use of well‑known credential‑harvesting tools combined with custom command‑and‑control infrastructure hosted on servers located in jurisdictions commonly used to obscure attribution. The phishing emails were crafted with convincing language and authentic‑looking signatures, making detection difficult for untrained users.

Following the revelations, several affected organizations have issued security advisories and accelerated the rollout of multi‑factor authentication, email‑authentication protocols such as DMARC, and employee training programs aimed at recognizing sophisticated social‑engineering attempts.

The incidents fit a broader pattern of state‑backed cyber‑espionage that analysts say reflects Beijing’s strategic emphasis on AI as a cornerstone of future economic and military power. While direct state involvement is hard to prove, the operational characteristics and target selection align with known Chinese intelligence objectives.

Cybersecurity experts warn that similar campaigns are likely to persist, urging both private firms and public agencies to adopt stronger defensive postures and to collaborate on sharing threat intelligence. The reports also reignite calls for clearer international norms governing state‑sponsored cyber activities, especially in domains as critical as artificial intelligence.