Since the onset of the Ukrainian conflict, analysts have identified a marked increase in cyber intrusions by Chinese groups aimed at harvesting sensitive military information. The escalation began in May 2022, just months following Russia’s full-scale invasion of Ukraine. Despite the public narrative of cooperation between President Vladimir Putin and President Xi Jinping, the reality on the cyber battleground tells a different story, as China appears to consider its Russian counterpart a vulnerable target for intelligence theft.
One notable incident involved a group known as Sanyo, which posed as a major Russian engineering firm's email addresses to infiltrate systems in search of nuclear submarine information. This tactic highlights China's intent to gather details regarding Russian military operations and defense strategies in Ukraine.
Experts remark that while China possesses significant financial and technological resources, its military lacks ample battlefield experience. Consequently, analysts believe that the conflict in Ukraine serves as a valuable opportunity for China to collect intelligence on Western weaponry and operational tactics used in the conflict.
According to Che Chang, a researcher at Taiwan’s TeamT5 cybersecurity firm, “China likely seeks to gather intelligence on Russia's activities, including on its military operation in Ukraine, defense developments and other geopolitical maneuvers.”
Although it is difficult to assess the success of these cyber offensives, internal Russian documents, including a classified report from the F.S.B. (Federal Security Service), indicate growing concern over these intrusions. The document explicitly describes attempts by China to access Russian defense technology and expertise, unequivocally labeling China as an “enemy,” highlighting the complexity of their relationship amid the war.
One notable incident involved a group known as Sanyo, which posed as a major Russian engineering firm's email addresses to infiltrate systems in search of nuclear submarine information. This tactic highlights China's intent to gather details regarding Russian military operations and defense strategies in Ukraine.
Experts remark that while China possesses significant financial and technological resources, its military lacks ample battlefield experience. Consequently, analysts believe that the conflict in Ukraine serves as a valuable opportunity for China to collect intelligence on Western weaponry and operational tactics used in the conflict.
According to Che Chang, a researcher at Taiwan’s TeamT5 cybersecurity firm, “China likely seeks to gather intelligence on Russia's activities, including on its military operation in Ukraine, defense developments and other geopolitical maneuvers.”
Although it is difficult to assess the success of these cyber offensives, internal Russian documents, including a classified report from the F.S.B. (Federal Security Service), indicate growing concern over these intrusions. The document explicitly describes attempts by China to access Russian defense technology and expertise, unequivocally labeling China as an “enemy,” highlighting the complexity of their relationship amid the war.


















