London Daily

Focus on the big picture.
Saturday, Jan 31, 2026

Mystery of alleged Chinese hack on eve of Ukraine invasion

Mystery of alleged Chinese hack on eve of Ukraine invasion

Allegations of Chinese cyber activity as the recent conflict broke out in Ukraine have been emerging.

The details appear unusually murky but one Western intelligence official believes the aim was espionage - and the cyber-attack may have been broader than previously reported.

The Times first reported that hackers, alleged to be based in China, began targeting Ukrainian websites on 23 February, the day before the invasion.

That led to questions as to whether they had advance notice of Moscow's plans and if their intention was somehow to support Russia.

A broad set of Ukrainian government and commercial organisations were said to have been targeted by hackers, including organisations linked to nuclear power.

It is unclear how far this activity was scanning for vulnerabilities online and how many websites were actually compromised.

But the aim looks to have been espionage - stealing secrets - rather than the kind of sabotage operations which Russia was accused of carrying out just before the invasion, and when it started.

The Times cited intelligence documents - but the Ukrainian security service denied they had handed anything over and seemed to downplay the revelations, adding to confusion.

Some analysts wondered if they were worried about antagonising Beijing.

On Monday, the Chinese embassy in the UK rejected the claim and described the Times report as "sheer irresponsible talk and not credible at all".

Russia targeted


But some Western officials believe the story is even more complex. They claim the Chinese actors went on to target systems in Russia and Belarus, as well as Poland:

"Since late February, Chinese cyber-actors have been launching cyber-attacks against government and military networks in Ukraine, Russia and Belarus," claims one western intelligence official.

"Russia was observed to be a significant target of the recent Chinese cyber activity," they added.

The claim cannot be independently verified, although a number of researchers and cyber-security companies say they have seen some Chinese activity and are investigating.

There are other bizarre aspects: the attacks were more amateurish and 'noisy' than normal, it is claimed, almost as if the hackers were less concerned about being discovered.

And the alleged Chinese hackers, in a shift from normal behaviour, are said to have launched their campaign from Western infrastructure.

Normally, they would approach their target using servers and systems around the world. but in this case it was only from Western systems.

"The scale, timing and targets of the operation indicate a significant departure," the Western intelligence official said.

False flag


China has always dismissed accusations that it is involved in cyber-espionage and has recently been pointing the finger at Western governments, and particularly the US, over hacking into its networks.

"The targeting of both the Ukrainian and Russian targets was conducted in a non-covert way. One possible reason for this would be to try and 'false flag' the activity," the intelligence official explained.

So it is possible China was taking advantage of the conflict in order to spy, not just on Ukraine but also Russia, Belarus and other countries - but perhaps trying to do so using a 'false flag' - so that it could try to pin any blame on Western governments.

That is one possibility, but one which Beijing is likely to deny. Trying to understand what was really happening in this case may not be easy.

Newsletter

Related Articles

0:00
0:00
Close
China Lifts Sanctions on British MPs and Peers After Starmer Xi Talks in Beijing
Trump Nominates Kevin Warsh as Fed Chair to Reorient U.S. Monetary Policy Toward Pro-Growth Interest Rates
AstraZeneca Announces £11bn China Investment After Scaling Back UK Expansion Plans
Starmer and Xi Forge Warming UK-China Ties in Beijing Amid Strategic Reset
Tech Market Shifts and AI Investment Surge Drive Global Innovation and Layoffs
Markets Jolt as AI Spending, US Policy Shifts, and Global Security Moves Drive New Volatility
U.S. Signals Potential Decertification of Canadian Aircraft as Bilateral Tensions Escalate
Former South Korean First Lady Kim Keon Hee Sentenced to 20 Months for Bribery
Tesla Ends Model S and X Production and Sends $2 Billion to xAI as 2025 Revenue Declines
China Executes 11 Members of the Ming Clan in Cross-Border Scam Case Linked to Myanmar’s Lawkai
Trump Administration Officials Held Talks With Group Advocating Alberta’s Independence
Starmer Signals UK Push for a More ‘Sophisticated’ Relationship With China in Talks With Xi
Shopping Chatbots Move From Advice to Checkout as Walmart Pushes Faster Than Amazon
Starmer Seeks Economic Gains From China Visit While Navigating US Diplomatic Sensitivities
Starmer Says China Visit Will Deliver Economic Benefits as He Prepares to Meet Xi Jinping
UK Prime Minister Starmer Arrives in China to Bolster Trade and Warn Firms of Strategic Opportunities
The AI Hiring Doom Loop — Algorithmic Recruiting Filters Out Top Talent and Rewards Average or Fake Candidates
Amazon to Cut 16,000 Corporate Jobs After Earlier 14,000 Reduction, Citing Streamlining and AI Investment
Federal Reserve Holds Interest Rate at 3.75% as Powell Faces DOJ Criminal Investigation During 2026 Decision
Putin’s Four-Year Ukraine Invasion Cost: Russia’s Mass Casualty Attrition and the Donbas Security-Guarantee Tradeoff
Wall Street Bets on Strong US Growth and Currency Moves as Dollar Slips After Trump Comments
UK Prime Minister Traveled to China Using Temporary Phones and Laptops to Limit Espionage Risks
Google’s $68 Million Voice Assistant Settlement Exposes Incentives That Reward Over-Collection
Kim Kardashian Admits Faking Paparazzi Visit to Britney Spears for Fame in Early 2000s
UPS to Cut 30,000 More Jobs by 2026 Amid Shift to High-Margin Deliveries
France Plans to Replace Teams and Zoom Across Government With Homegrown Visio by 2027
Trump Removes Minneapolis Deportation Operation Commander After Fatal Shooting of Protester
Iran’s Elite Wealth Abroad and Sanctions Leakage: How Offshore Luxury Sustains Regime Resilience
U.S. Central Command Announces Regional Air Exercise as Iran Unveils Drone Carrier Footage
Four Arrested in Andhra Pradesh Over Alleged HIV-Contaminated Injection Attack on Doctor
Hot Drinks, Hidden Particles: How Disposable Cups Quietly Increase Microplastic Exposure
UK Banks Pledge £11 Billion Lending Package to Help Firms Expand Overseas
Suella Braverman Defects to Reform UK, Accusing Conservatives of Betrayal on Core Policies
Melania Trump Documentary Sees Limited Box Office Traction in UK Cinemas
Meta and EssilorLuxottica Ray-Ban Smart Glasses and the Non-Consensual Public Recording Economy
WhatsApp Develops New Meta AI Features to Enhance User Control
Germany Considers Gold Reserves Amidst Rising Tensions with the U.S.
Michael Schumacher Shows Significant Improvement in Health Status
Greenland’s NATO Stress Test: Coercion, Credibility, and the New Arctic Bargaining Game
Diego Garcia and the Chagos Dispute: When Decolonization Collides With Alliance Power
Trump Claims “Total” U.S. Access to Greenland as NATO Weighs Arctic Basing Rights and Deterrence
Air France and KLM Suspend Multiple Middle East Routes as Regional Tensions Disrupt Aviation
U.S. winter storm triggers 13,000-plus flight cancellations and 160,000 power outages
Poland delays euro adoption as Domański cites $1tn economy and zloty advantage
White House: Trump warns Canada of 100% tariff if Carney finalizes China trade deal
PLA opens CMC probe of Zhang Youxia, Liu Zhenli over Xi authority and discipline violations
ICE and DHS immigration raids in Minneapolis: the use-of-force accountability crisis in mass deportation enforcement
UK’s Starmer and Trump Agree on Urgent Need to Bolster Arctic Security
Starmer Breaks Diplomatic Restraint With Firm Rebuke of Trump, Seizing Chance to Advocate for Europe
UK Finance Minister Reeves to Join Starmer on China Visit to Bolster Trade and Economic Ties
×