London Daily

Focus on the big picture.
Thursday, Oct 16, 2025

Hackers target Chinese government agencies, diplomatic missions and WHO amid pandemic

Hackers target Chinese government agencies, diplomatic missions and WHO amid pandemic

More than 200 VPN servers have been compromised in a massive campaign by hackers, according to a report by leading Chinese internet provider Qihoo 360. The report attributed the attacks to advanced hacker group DarkHotel

Chinese agencies and diplomatic missions have been targeted by hackers through their virtual private network (VPN) servers in a coordinated cyber espionage campaign, at a time when many governments and global organisations are more vulnerable than ever to security breaches due to remote working arrangements amid the pandemic, according to a report by a leading Chinese cybersecurity provider.

Both domestic Chinese agencies and diplomatic missions in countries including Italy, the UK, North Korea and Thailand have been attacked, according to a report by Qihoo 360. It speculated in the report that the East Asia-based DarkHotel hacking group attacked Chinese agencies for reasons linked to the pandemic.

The group is also suspected to be behind recent cyberattacks against the World Health Organisation (WHO), as officials and cybersecurity experts warn that hackers of all stripes are seeking to capitalise on international concern over the spread of the coronavirus, according to a Reuters report.

“Since March this year, more than 200 VPN servers have been compromised and many Chinese institutions abroad were under attack. In early April, the attack spread to government agencies in Beijing and Shanghai,” said the report by Qihoo 360, China’s largest antivirus vendor.

The WHO did not immediately respond to a request for comment.

“The Chinese government has been resolutely cracking down on any form of cyber attacks and will step up measures to protect its cyber security,” said Zhao Lijian, a spokesman for China's Ministry of Foreign Affairs. He also called for more international cooperation to protect cyber security.

The attacks come at a time when many governments and corporations are asking employees to work from home to prevent the spread of the novel coronavirus. Beijing has asked most offices to host no more than half of employees at one time, and suspended classes in schools.

“Especially in this global battle against the coronavirus pandemic, VPN plays an indispensable and important role in the remote telecommunication of enterprises and government agencies,” Qihoo 360 said in its post. “Once VPNs are controlled by threat actors, the internal assets of many enterprises and institutions will be exposed to the public network, and the loss will be immeasurable.”

DarkHotel, which Qihoo 360 said initiated the attacks, is a group of elite hackers which has been conducting cyber-espionage operations since at least 2007. Cybersecurity firms have traced many of DarkHotel’s operations to East Asia, with targets including government employees and business executives in places such as China, North Korea, Japan and the United States.

Qihoo 360 speculated in the report that the group could have attacked Chinese agencies to gain information related to the pandemic.



“After [the] Chinese government took strict measures to fight the virus, now the outbreak has been controlled in China. But the pandemic is still going on in a lot of countries,” Qihoo 360 wrote in the post. “[Are the attacks] intended to spy upon China's medical technology and virus-control measures during the epidemic?”

However, security experts said that aside from Qihoo 360's report, at the present time there is no other evidence that DarkHotel was behind the attacks or that the hackers' motivations were related to the pandemic.

“[So far] we don’t see any third party confirmation yet. Those should come within the next few days,” said Mark Webb-Johnson, co-founder and chief technology officer of security service provider Network Box. “For the moment, this is one company’s opinion. That said, I don't see any evidence to dispute its credibility.”

“This write-up is full of speculation, no evidence this was actually DarkHotel, and a ton of confirmation bias about targeting because of Covid,” tweeted Brian Bartholomew, a researcher from Kaspersky, which tracks DarkHotel, after the release of the Qihoo 360 report. “Not saying they’re wrong, but in the future, there needs to be more supporting data to support claims.”

In the latest series of attacks against Chinese institutions, hackers hijacked the servers of domestic VPN vendor SangFor Technologies by replacing a file in the VPN programme’s security update with one that gave them a backdoor to users’ devices, according to Qihoo 360.

Users were prompted to update their VPN clients upon logging in, unknowingly downloading the file and giving hackers access to their devices.

In a post on Tuesday, Shenzhen-based SangFor posted solutions including security patches and free antivirus software.

“We truly apologise for security loopholes uncovered,” SangFor said in the post. “The company has launched an all-round review of existing products and will run stricter verification tests.”

SangFor did not immediately respond to a request for comment.

Newsletter

Related Articles

0:00
0:00
Close
Australia’s Wedgetail Spies Aid NATO Response as Russian MiGs Breach Estonian Airspace
McGowan Urges Chalmers to Cut Spending Over Tax Hike to Close $20 Billion Budget Gap
Victoria Orders Review of Transgender Prison Placement Amid Safety Concerns for Female Inmates
U.S. Treasury Mobilises New $20 Billion Debt Facility to Stabilise Argentina
French Business Leaders Decry Budget as Macron’s Pro-Enterprise Promise Undermined
Trump Claims Modi Pledged India Would End Russian Oil Imports Amid U.S. Tariff Pressure
Surging AI Startup Valuations Fuel Bubble Concerns Among Top Investors
Australian Punter Archie Wilson Tears Up During Nebraska Press Conference, Sparking Conversation on Male Vulnerability
Australia Confirms U.S. Access to Upgraded Submarine Shipyard Under AUKUS Deal
“Firepower” Promised for Ukraine as NATO Ministers Meet — But U.S. Tomahawks Remain Undecided
Brands Confront New Dilemma as Extremists Adopt Fashion Labels
The Sydney Sweeney and Jeans Storm: “The Outcome Surpassed Our Wildest Dreams”
Erika Kirk Delivers Moving Tribute at White House as Trump Awards Charlie Presidential Medal of Freedom
British Food Influencer ‘Big John’ Detained in Australia After Visa Dispute
ScamBodia: The Chinese Fraud Empire Shielded by Cambodia’s Ruling Elite
French PM Suspends Macron’s Pension Reform Until After 2027 in Bid to Stabilize Government
Orange, Bouygues and Free Make €17 Billion Bid for Drahi’s Altice France Telecom Assets
Dutch Government Seizes Chipmaker After U.S. Presses for Removal of Chinese CEO
Bessent Accuses China of Dragging Down Global Economy Amid New Trade Curbs
U.S. Revokes Visas of Foreign Nationals Who ‘Celebrated’ Charlie Kirk’s Assassination
AI and Cybersecurity at Forefront as GITEX Global 2025 Kicks Off in Dubai
DJI Loses Appeal to Remove Pentagon’s ‘Chinese Military Company’ Label
EU Deploys New Biometric Entry/Exit System: What Non-EU Travelers Must Know
Australian Prime Minister’s Private Number Exposed Through AI Contact Scraper
Ex-Microsoft Engineer Confirms Famous Windows XP Key Was Leaked Corporate License, Not a Hack
China’s lesson for the US: it takes more than chips to win the AI race
Australia Faces Demographic Risk as Fertility Falls to Record Low
California County Reinstates Mask Mandate in Health Facilities as Respiratory Illness Risk Rises
Israel and Hamas Agree to First Phase of Trump-Brokered Gaza Truce, Hostages to Be Freed
French Political Turmoil Elevates Marine Le Pen as Rassemblement National Poised for Power
China Unveils Sweeping Rare Earth Export Controls to Shield ‘National Security’
The Davos Set in Decline: Why the World Economic Forum’s Power Must Be Challenged
France: Less Than a Month After His Appointment, the New French Prime Minister Resigns
Hungarian Prime Minister Viktor Orbán stated that Hungary will not adopt the euro because the European Union is falling apart.
Sarah Mullally Becomes First Woman Appointed Archbishop of Canterbury
Mayor in western Germany in intensive care after stabbing
Australian government pays Deloitte nearly half a million dollars for a report built on fabricated quotes, fake citations, and AI-generated nonsense.
US Prosecutors Gained Legal Approval to Hack Telegram Servers
Macron Faces Intensifying Pressure to Resign or Trigger New Elections Amid France’s Political Turmoil
Standard Chartered Names Roberto Hoornweg as Sole Head of Corporate & Investment Banking
UK Asylum Housing Firm Faces Backlash Over £187 Million Profits and Poor Living Conditions
UK Police Crack Major Gang in Smuggling of up to 40,000 Stolen Phones to China
BYD’s UK Sales Soar Nearly Nine-Fold, Making Britain Its Biggest Market Outside China
Trump Proposes Farm Bailout from Tariff Revenues Amid Backlash from Other Industries
FIFA Accuses Malaysia of Forging Citizenship Documents, Suspends Seven Footballers
Latvia to Bar Tourist and Occasional Buses to Russia and Belarus Until 2026
A Dollar Coin Featuring Trump’s Portrait Expected to Be Issued Next Year
Australia Orders X to Block Murder Videos, Citing Online Safety and Public Exposure
Three Scientists Awarded Nobel Prize in Medicine for Discovery of Immune Self-Tolerance Mechanism
OpenAI and AMD Forge Landmark AI-Chip Alliance with Equity Option
×