London Daily

Focus on the big picture.
Saturday, Jan 24, 2026

Mystery of alleged Chinese hack on eve of Ukraine invasion

Mystery of alleged Chinese hack on eve of Ukraine invasion

Allegations of Chinese cyber activity as the recent conflict broke out in Ukraine have been emerging.

The details appear unusually murky but one Western intelligence official believes the aim was espionage - and the cyber-attack may have been broader than previously reported.

The Times first reported that hackers, alleged to be based in China, began targeting Ukrainian websites on 23 February, the day before the invasion.

That led to questions as to whether they had advance notice of Moscow's plans and if their intention was somehow to support Russia.

A broad set of Ukrainian government and commercial organisations were said to have been targeted by hackers, including organisations linked to nuclear power.

It is unclear how far this activity was scanning for vulnerabilities online and how many websites were actually compromised.

But the aim looks to have been espionage - stealing secrets - rather than the kind of sabotage operations which Russia was accused of carrying out just before the invasion, and when it started.

The Times cited intelligence documents - but the Ukrainian security service denied they had handed anything over and seemed to downplay the revelations, adding to confusion.

Some analysts wondered if they were worried about antagonising Beijing.

On Monday, the Chinese embassy in the UK rejected the claim and described the Times report as "sheer irresponsible talk and not credible at all".

Russia targeted


But some Western officials believe the story is even more complex. They claim the Chinese actors went on to target systems in Russia and Belarus, as well as Poland:

"Since late February, Chinese cyber-actors have been launching cyber-attacks against government and military networks in Ukraine, Russia and Belarus," claims one western intelligence official.

"Russia was observed to be a significant target of the recent Chinese cyber activity," they added.

The claim cannot be independently verified, although a number of researchers and cyber-security companies say they have seen some Chinese activity and are investigating.

There are other bizarre aspects: the attacks were more amateurish and 'noisy' than normal, it is claimed, almost as if the hackers were less concerned about being discovered.

And the alleged Chinese hackers, in a shift from normal behaviour, are said to have launched their campaign from Western infrastructure.

Normally, they would approach their target using servers and systems around the world. but in this case it was only from Western systems.

"The scale, timing and targets of the operation indicate a significant departure," the Western intelligence official said.

False flag


China has always dismissed accusations that it is involved in cyber-espionage and has recently been pointing the finger at Western governments, and particularly the US, over hacking into its networks.

"The targeting of both the Ukrainian and Russian targets was conducted in a non-covert way. One possible reason for this would be to try and 'false flag' the activity," the intelligence official explained.

So it is possible China was taking advantage of the conflict in order to spy, not just on Ukraine but also Russia, Belarus and other countries - but perhaps trying to do so using a 'false flag' - so that it could try to pin any blame on Western governments.

That is one possibility, but one which Beijing is likely to deny. Trying to understand what was really happening in this case may not be easy.

Newsletter

Related Articles

0:00
0:00
Close
Starmer Breaks Diplomatic Restraint With Firm Rebuke of Trump, Seizing Chance to Advocate for Europe
UK Finance Minister Reeves to Join Starmer on China Visit to Bolster Trade and Economic Ties
Prince Harry Says Sacrifices of NATO Forces in Afghanistan Deserve ‘Respect’ After Trump Remarks
Barron Trump Emerges as Key Remote Witness in UK Assault and Rape Trial
Nigel Farage Attended Davos 2026 Using HP Trust Delegate Pass Linked to Sasan Ghandehari
Gold Jumps More Than 8% in a Week as the Dollar Slides Amid Greenland Tariff Dispute
BlackRock Executive Rick Rieder Emerges as Leading Contender to Succeed Jerome Powell as Fed Chair
Boston Dynamics Atlas humanoid robot and LG CLOiD home robot: the platform lock-in fight to control Physical AI
United States under President Donald Trump completes withdrawal from the World Health Organization: health sovereignty versus global outbreak early-warning access
FBI and U.S. prosecutors vs Ryan Wedding’s transnational cocaine-smuggling network: the fight over witness-killing and cross-border enforcement
Trump Administration’s Iran Military Buildup and Sanctions Campaign Puts Deterrence Credibility on the Line
Apple and OpenAI Chase Screenless AI Wearables as the Post-iPhone Interface Battle Heats Up
Tech Brief: AI Compute, Chips, and Platform Power Moves Driving Today’s Market Narrative
NATO’s Stress Test Under Trump: Alliance Credibility, Burden-Sharing, and the Fight Over Strategic Territory
OpenAI’s Money Problem: Explosive Growth, Even Faster Costs, and a Race to Stay Ahead
Trump Reverses Course and Criticises UK-Mauritius Chagos Islands Agreement
Elizabeth Hurley Tells UK Court of ‘Brutal’ Invasion of Privacy in Phone Hacking Case
UK Bond Yields Climb as Report Fuels Speculation Over Andy Burnham’s Return to Parliament
America’s Venezuela Oil Grip Meets China’s Demand: Market Power, Legal Shockwaves, and the New Rules of Energy Leverage
TikTok’s U.S. Escape Plan: National Security Firewall or Political Theater With a Price Tag?
Trump’s Board of Peace: Breakthrough Diplomacy or a Hostile Takeover of Global Order?
Trump’s Board of Peace: Breakthrough Diplomacy or a Hostile Takeover of Global Order?
The Greenland Gambit: Economic Genius or Political Farce?
The Greenland Gambit: Economic Genius or Political Farce?
The Greenland Gambit: Economic Genius or Political Farce?
Will AI Finally Make Blue-Collar Workers Rich—or Is This Just Elite Tech Spin?
Prince William to Make Official Visit to Saudi Arabia in February
Prince Harry Breaks Down in London Court, Says UK Tabloids Have Made Meghan Markle’s Life ‘Absolute Misery’
Malin + Goetz UK Business Enters Administration, All Stores Close
EU and UK Reject Trump’s Greenland-Linked Tariff Threats and Pledge Unified Response
UK Deepfake Crackdown Puts Intense Pressure on Musk’s Grok AI After Surge in Non-Consensual Explicit Images
Prince Harry Becomes Emotional in London Court, Invokes Memory of Princess Diana in Testimony Against UK Tabloids
UK Inflation Rises Unexpectedly but Interest Rate Cuts Still Seen as Likely
AI vs Work: The Battle Over Who Controls the Future of Labor
Buying an Ally’s Territory: Strategic Genius or Geopolitical Breakdown?
AI Everywhere: Power, Money, War, and the Race to Control the Future
Trump vs the World Order: Disruption Genius or Global Arsonist?
Trump vs the World Order: Disruption Genius or Global Arsonist?
Trump vs the World Order: Disruption Genius or Global Arsonist?
Trump vs the World Order: Disruption Genius or Global Arsonist?
Arctic Power Grab: Security Chessboard or Climate Crime Scene?
Starmer Steps Back from Trump’s ‘Board of Peace’ Amid Strained US–UK Relations
Prince Harry’s Lawyer Tells UK Court Daily Mail Was Complicit in Unlawful Privacy Invasions
UK Government Approves China’s ‘Mega Embassy’ in London Amid Debate Over Security and Diplomacy
Trump Cites UK’s Chagos Islands Sovereignty Shift as Justification for Pursuing Greenland Acquisition
UK Government Weighs Australia-Style Social Media Ban for Under-Sixteens Amid Rising Concern Over Online Harm
Trump Aides Say U.S. Has Discussed Offering Asylum to British Jews Amid Growing Antisemitism Concerns
UK Seeks Diplomatic De-escalation with Trump Over Greenland Tariff Threat
Prince Harry Returns to London as High Court Trial Begins Over Alleged Illegal Tabloid Snooping
High-Speed Train Collision in Southern Spain Kills at Least Twenty-One and Injures Scores
×