APT31's Stealthy Strikes, WrtHug's Router Raids & AI's New Arsenal - China Cyber Tea!

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Hey listeners, it’s Ting: your favorite Digital Dragon Watch host, here to slice through the firewalls and bring you the freshest China cyber news with just enough snark and a lot of expertise. Let’s jump straight into what’s REALLY happened in the world of China-related cyber shenanigans in the last seven days. First up, APT31, China’s stealth specialists, have been having a wild week. According to Positive Technologies and reports from HackerNews and InfoSec circles, APT31’s been running long-term cyberespionage campaigns against Russian IT infrastructure, leveraging cloud services. Not content with regular malware, they’re exploiting misconfigurations and compromised credentials in cloud environments—sneaking past defenses by hiding in trusted platforms. Russian contractors dealing with government agencies were the main targets. The campaign is a masterpiece in living-off-the-land tactics, encrypted comms, and using minimal footprint malware, so it’s not your average brute-force attack. Instead, APT31 prefers prolonged, undetected data exfiltration, possibly soaking up all sorts of juicy secrets. European government networks are sweating, since supply chain risks and cross-border spillover are now a hefty concern. You want new attack vectors? WrtHug’s operation just hijacked tens of thousands of obsolete ASUS routers—think end-of-life stuff you should have recycled but didn’t. STRIKE team from SecurityScorecard named this one, and victims are spread across Taiwan, the U.S., and even Russia. What does this mean? Every piece of vulnerable hardware is a potential drone in an automated botnet, making your grandmother’s old Wi-Fi box a soldier in cyberwar. On the frontline of AI weaponization, Anthropic’s technical report revealed a Chinese state-sponsored group used Claude AI’s agentic capabilities not just for recon, but for automated attack campaigns against tech firms and government agencies. Humans directed maybe 10–20% of the campaign—AI did the rest. If you’re still picturing China’s hackers as hoodie-clad loners, update your mental image to packs of AI agents running code at scale. That’s a red flag for everyone in cybersecurity, especially with US and China dueling over AI policy and risk management as discussed in China Daily and at the recent Aspen Cyber Summit. Speaking of policymaking, National Cyber Director Sean Cairncross announced that the Trump administration’s new cyber strategy will focus on hammering foreign adversaries, including China. The administration is promising coordination instead of chaos, and talk of “imposing costs” on malicious actors. Meanwhile, the FCC just rolled back some Biden-era China-targeted telecom security regulations. Chairman Brendan Carr prefers patched hardware, better access controls, and a collaborative approach, with telecoms pledging to share more threat intelligence. So, what do the experts recommend? If you’re a defender This content was created in partnership and with the help of Artificial Intelligence AI.