London Daily

Focus on the big picture.
Saturday, Dec 13, 2025

Mystery of alleged Chinese hack on eve of Ukraine invasion

Mystery of alleged Chinese hack on eve of Ukraine invasion

Allegations of Chinese cyber activity as the recent conflict broke out in Ukraine have been emerging.

The details appear unusually murky but one Western intelligence official believes the aim was espionage - and the cyber-attack may have been broader than previously reported.

The Times first reported that hackers, alleged to be based in China, began targeting Ukrainian websites on 23 February, the day before the invasion.

That led to questions as to whether they had advance notice of Moscow's plans and if their intention was somehow to support Russia.

A broad set of Ukrainian government and commercial organisations were said to have been targeted by hackers, including organisations linked to nuclear power.

It is unclear how far this activity was scanning for vulnerabilities online and how many websites were actually compromised.

But the aim looks to have been espionage - stealing secrets - rather than the kind of sabotage operations which Russia was accused of carrying out just before the invasion, and when it started.

The Times cited intelligence documents - but the Ukrainian security service denied they had handed anything over and seemed to downplay the revelations, adding to confusion.

Some analysts wondered if they were worried about antagonising Beijing.

On Monday, the Chinese embassy in the UK rejected the claim and described the Times report as "sheer irresponsible talk and not credible at all".

Russia targeted


But some Western officials believe the story is even more complex. They claim the Chinese actors went on to target systems in Russia and Belarus, as well as Poland:

"Since late February, Chinese cyber-actors have been launching cyber-attacks against government and military networks in Ukraine, Russia and Belarus," claims one western intelligence official.

"Russia was observed to be a significant target of the recent Chinese cyber activity," they added.

The claim cannot be independently verified, although a number of researchers and cyber-security companies say they have seen some Chinese activity and are investigating.

There are other bizarre aspects: the attacks were more amateurish and 'noisy' than normal, it is claimed, almost as if the hackers were less concerned about being discovered.

And the alleged Chinese hackers, in a shift from normal behaviour, are said to have launched their campaign from Western infrastructure.

Normally, they would approach their target using servers and systems around the world. but in this case it was only from Western systems.

"The scale, timing and targets of the operation indicate a significant departure," the Western intelligence official said.

False flag


China has always dismissed accusations that it is involved in cyber-espionage and has recently been pointing the finger at Western governments, and particularly the US, over hacking into its networks.

"The targeting of both the Ukrainian and Russian targets was conducted in a non-covert way. One possible reason for this would be to try and 'false flag' the activity," the intelligence official explained.

So it is possible China was taking advantage of the conflict in order to spy, not just on Ukraine but also Russia, Belarus and other countries - but perhaps trying to do so using a 'false flag' - so that it could try to pin any blame on Western governments.

That is one possibility, but one which Beijing is likely to deny. Trying to understand what was really happening in this case may not be easy.

Newsletter

Related Articles

0:00
0:00
Close
Ex-ICC Prosecutor Alleges UK Threatened to Withdraw Funding Over Netanyahu Arrest Warrant Bid
UK Disciplinary Tribunal Clears Carter-Ruck Lawyer of Misconduct in OneCoin Case
‘Pink Ladies’ Emerge as Prominent Face of UK Anti-Immigration Protests
Nigel Farage Says Reform UK Has Become Britain’s Largest Party as Labour Membership Falls Sharply
Google DeepMind and UK Government Launch First Automated AI Lab to Accelerate Scientific Discovery
UK Economy Falters Ahead of Budget as Growth Contracts and Confidence Wanes
Australia Approves Increased Foreign Stake in Strategic Defence Shipbuilder
Former UK Prime Minister Boris Johnson proclaims, “For Ukraine, surrendering their land would be a nightmare.”
Microsoft Challenges £2.1 Billion UK Cloud Licensing Lawsuit at Competition Tribunal
Fake Doctor in Uttar Pradesh Accused of Killing Woman After Performing YouTube-Based Surgery
Hackers Are Hiding Malware in Open-Source Tools and IDE Extensions
Traveling to USA? Homeland Security moving toward requiring foreign travelers to share social media history
UK Officials Push Back at Trump Saying European Leaders ‘Talk Too Much’ About Ukraine
UK Warns of Escalating Cyber Assault Linked to Putin’s State-Backed Operations
UK Consumer Spending Falters in November as Households Hold Back Ahead of Budget
UK Orders Fresh Review of Prince Harry’s Security Status After Formal Request
U.S. Authorises Nvidia to Sell H200 AI Chips to China Under Security Controls
Trump in Direct Assault: European Leaders Are Weak, Immigration a Disaster. Russia Is Strong and Big — and Will Win
"App recommendation" or disguised advertisement? ChatGPT Premium users are furious
"The Great Filtering": Australia Blocks Hundreds of Thousands of Minors From Social Networks
Mark Zuckerberg Pulls Back From Metaverse After $70 Billion Loss as Meta Shifts Priorities to AI
Nvidia CEO Says U.S. Data-Center Builds Take Years while China ‘Builds a Hospital in a Weekend’
Indian Airports in Turmoil as IndiGo Cancels Over a Thousand Flights, Stranding Thousands
Hollywood Industry on Edge as Netflix Secures Near-$60 Bln Loan for Warner Bros Takeover
Drugs and Assassinations: The Connection Between the Italian Mafia and Football Ultras
Hollywood megadeal: Netflix acquires Warner Bros. Discovery for 83 billion dollars
The Disregard for a Europe ‘in Danger of Erasure,’ the Shift Toward Russia: Trump’s Strategic Policy Document
Two and a Half Weeks After the Major Outage: A Cloudflare Malfunction Brings Down Multiple Sites
UK data-regulator demands urgent clarity on racial bias in police facial-recognition systems
Labour Uses Biscuits to Explain UK Debt — MPs Lean Into Social Media to Reach New Audiences
German President Lays Wreath at Coventry as UK-Germany Reaffirm Unity Against Russia’s Threat
UK Inquiry Finds Putin ‘Morally Responsible’ for 2018 Novichok Death — London Imposes Broad Sanctions on GRU
India backs down on plan to mandate government “Sanchar Saathi” app on all smartphones
King Charles Welcomes German President Steinmeier to UK in First State Visit by Berlin in 27 Years
UK Plans Major Cutback to Jury Trials as Crown Court Backlog Nears 80,000
UK Government to Significantly Limit Jury Trials in England and Wales
U.S. and U.K. Seal Drug-Pricing Deal: Britain Agrees to Pay More, U.S. Lifts Tariffs
UK Postpones Decision Yet Again on China’s Proposed Mega-Embassy in London
Head of UK Budget Watchdog Resigns After Premature Leak of Reeves’ Budget Report
Car-sharing giant Zipcar to exit UK market by end of 2025
Reports of Widespread Drone Deployment Raise Privacy and Security Questions in the UK
UK Signals Security Concerns Over China While Pursuing Stronger Trade Links
Google warns of AI “irrationality” just as Gemini 3 launch rattles markets
Top Consultancies Freeze Starting Salaries as AI Threatens ‘Pyramid’ Model
Macron Says Washington Pressuring EU to Delay Enforcement of Digital-Regulation Probes Against Meta, TikTok and X
UK’s DragonFire Laser Downs High-Speed Drones as £316m Deal Speeds Naval Deployment
UK Chancellor Rejects Claims She Misled Public on Fiscal Outlook Ahead of Budget
Starmer Defends Autumn Budget as Finance Chief Faces Accusations of Misleading Public Finances
EU Firms Struggle with 3,000-Hour Paperwork Load — While Automakers Fear De Facto 2030 Petrol Car Ban
White House launches ‘Hall of Shame’ site to publicly condemn media outlets for alleged bias
×