Alexandra Reeves Spills: China's AI Ethics Crackdown, Router Raids, and Scam Centers Exposed

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Hey listeners, Alexandra Reeves here with Digital Dragon Watch, your weekly China cyber alert. Diving straight into the past seven days' hottest China-linked threats as of April 8, 2026—verifiable incidents only, no fluff. First up, China's Ministry of Industry and Information Technology dropped the Trial Measures for Ethical Review and Service of AI Technology on April 2, teaming with eight other departments. This builds on their 2022 Opinions on Strengthening Governance of Science and Technology Ethics and December 2023 Measures for Ethical Review. It's a full-lifecycle push—promoting human well-being, fairness, privacy, and controllability while tying ethics to strict legal compliance under the People's Republic constitution. No more AI ethics washing; this mandates technical and compliance checks from design to deployment, signaling Beijing's ramp-up in responsible AI amid global scrutiny. Shifting to attacks, Black Lotus Labs at Lumen uncovered no direct China ops this week, but the broader landscape echoes Dragon patterns. Russia's Forest Blizzard hit 18,000 routers via old flaws, siphoning Microsoft Office auth tokens from 200 orgs and 5,000 devices—peaking December 2025, targeting foreign affairs ministries and email providers. Microsoft confirmed it in their blog, with no malware needed, just DNS redirects. While Russian-led, experts at Krebs on Security note similarities to Volt Typhoon's router tactics, that Chinese group infamous for U.S. critical infra pre-positioning. Targeted sectors? Government heavy, plus cloud via TeamPCP's worm hitting Docker APIs, Kubernetes, Redis, and React2Shell vulns since December 2025—extorting over Telegram, now with Iran-focused wipers wiping Farsi systems. U.S. responses: Justice Department crushed four IoT botnets—Aisuru, Kimwolf, JackSkid, Mossad—disrupting 3 million devices behind massive DDoS extortion, per the feds' takedown with Canada and Germany. New vectors? Identity logins over break-ins, per Ontinue's 2H 2025 report—credential theft rules. No fresh China zero-days popped, but Thailand's April 7 raid on O Smach scam center in Surin near Cambodia exposed transnational ops, some tied to Chinese syndicates per Thai authorities. Defenses? Experts urge router patches—FCC banned new vulnerable consumer models April 7 on Security Now. Segment networks, enforce MFA, audit AI ethics per China's model: full lifecycle reviews. Prof G Pod warns of China's quiet Iran influence plays, so monitor cloud creds. Stay vigilant, listeners—patch now, ethics-check your AI. Thanks for tuning in—subscribe for more. This has been a Quiet Please production, for more check out quietplease.ai. For more http://www.quietplease.ai Get the best deals https://amzn.to/3ODvOta This content was created in partnership and with the help of Artificial Intelligence AI.