The United States, the United Kingdom, and New Zealand have collectively accused China of conducting a series of “malicious” cyber attacks through state-backed hacker groups identified as APT31 and APT40. These allegations detail a sophisticated global campaign targeting dissidents, government institutions, and the theft of trade secrets spanning across these nations.

In the UK, intelligence services have traced back cyber attacks to Chinese spies aiming to compromise the operations of the Electoral Commission and conduct online surveillance on members of Parliament. In response, the US has charged seven individuals purportedly linked to the APT31 group, while the UK has sanctioned a front company and two associates connected to the same group. Concerns over the adequacy of these measures have been voiced within the British political sphere, with some Members of Parliament advocating for a more assertive stance against China.

Simultaneously, New Zealand disclosed its encounter with cyber espionage in 2021, attributing the breach of its parliamentary counsel office and parliamentary service to Advanced Persistent Threat 40 (APT40), a group backed by the Chinese ministry of state security. This marked the first instance New Zealand openly attributed state-sponsored cyber attacks to China. Despite raising concerns with the Chinese government, New Zealand has refrained from imposing sanctions, citing a lack of enabling legislation.

The Chinese government has staunchly refuted these allegations, dismissing them as baseless and describing them as “completely fabricated and malicious slanders.” Nevertheless, the accusations have underscored ongoing cybersecurity concerns and the complex diplomatic relationships between China and the countries alleging espionage.

This multifaceted cyber espionage saga entails significant cybersecurity breaches, with targets ranging from government entities to individuals critical of Beijing’s policies. The collective stance taken by the US, UK, and New Zealand highlights the growing international apprehension regarding cybersecurity threats and foreign interference, prompting calls for a united and robust approach to safeguard sensitive information and democratic institutions against such activities.