China turns to private hackers as it cracks down on online activists on Tiananmen Square anniversary
Every year ahead of the June 4 commemoration of the Tiananmen Square massacre, the Chinese government tightens online censorship to suppress domestic discussion of the event.
- Every year ahead of the June 4 commemoration of the Tiananmen Square massacre, the Chinese government tightens online censorship to suppress domestic discussion of the event.
- Critics, dissidents and international groups anticipate an uptick in cyber activity ranging from emails with malicious links to network attacks in the days and weeks leading up to the anniversary.
From censorship to cyberattacks
- Since then pro-democracy activists have sought to commemorate the massacre on its anniversary – and Beijing has sought to counter mention of the crackdown.
- Chinese internet users note more restrictions and censorship in the run-up to the anniversary, with more words being banned and even certain emojis – like candles, denoting vigils – disappearing.
- Beyond censorship, cyberattacks on dissident groups and Chinese-language media in the diaspora have also occurred on or around the anniversary.
China’s cyberforce
- Today, much of China’s malicious cyber activities are carried out by the Ministry of State Security, or MSS, the country’s main intelligence agency and secret police.
- But prior to the MSS expanding into this role, the People’s Liberation Army, or PLA, was responsible for the earliest cyberattacks attributed to the Chinese government.
- In 2015, the PLA dedicated a new service to cyberwarfare and network security, the Strategic Support Force.
Hackers: Patriots, pirates or profiteers?
- In February 2024, a document leak exposed an underground network of Chinese cyber contractors hacking for profit.
- In 1999, Chinese hackers vandalized U.S. government websites following NATO’s accidental bombing of the Chinese embassy in Belgrade.
- The term “honker,” meaning “red hacker” in Chinese, emerged around this time to designate Chinese hackers motivated by ideology and nationalism.
- The i-Soon leak, however, documents how Chinese state-sponsored contractors engage in bribery and other illicit activities.