Leaked! China's Great Firewall Code Gushes Secrets as US Flirts with Hacker Pirates

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Welcome back, Digital Dragon Watchers—Ting here, your guide to the wild frontier of China cyber and hacking where the only thing changing faster than the firewall is my wardrobe. Let's cut the intro shorter than a WeChat sticker and get right to the juicy bits from the last seven days. If you blinked on Wednesday, you probably missed the hack of the decade: China’s Great Firewall—that notorious brainchild of Fang Binxing, “father of Chinese censorship”—sprouted a digital geyser, leaking 500 gigabytes of code, internal docs, work logs, and comms. The leak revealed not just how China blocks sites and censors conversations (think: deep packet inspection meets overzealous keyword blacklisting), but also how those censorship tools are quietly exported to countries like Myanmar, Kazakhstan, and Ethiopia courtesy of Geedge Networks. Even Europe got in on the act with some local firms linked to Geedge—so, next time your cat meme is missing, you know who to blame. For anyone tracking authoritarian tech, this data drop is a goldmine; some experts on Reddit are already dissecting it for vulnerabilities that could turbocharge VPNs or, for the less legal crowd, uncover backdoors perfect for exploitation. While China’s firewall code was leaking, their Ministry of Commerce went full-on trade war, launching probes into America’s analog chips—just days before Scott Bessent and He Lifeng squared off in Madrid. Beijing’s two-pronged attack aims for anti-dumping on interface ICs (look out, Texas Instruments) and a big “stop discriminating!” banner over US chip policies. At the heart of it: TikTok’s fate, chip bans, and whether semiconductor rivalry replaces chess as the world’s most passive-aggressive competition. Meanwhile in the US, cybersecurity policy is flirting with the dark side. The “Scam Farms Marque and Reprisal Authorization Act of 2025” brings back privateering—yep, legal hacking pirates—as a way to hit Chinese state actors. Sandra Joyce at Google’s Threat Intelligence Group announced a new “disruption unit” set to hack back, moving us from defense to offense. Not everyone’s thrilled—experts like Dick Wilkinson say coordinating digital pirates is like herding cats with quantum physics degrees. On the threat front, the FBI has been busy flagging Chinese-tied groups UNC6040 and UNC6395 for data theft campaigns targeting US Salesforce platforms, while Bitdefender published details on a fileless malware “EggStreme” deployed by a China-based APT against Philippine military systems. These attacks use multi-stage toolsets with DLL sideloading for ultra-stealthy espionage. Also, Jamf Threat Labs exposed the new CHILLYHELL macOS backdoor and ZynorRAT RAT, both modular and cross-platform. Danger: not just Windows, folks! China’s standards regulators weighed in too, with new mandates for labeling AI-generated content and real cyberattack reporting guidelines, aiming to control the informatio This content was created in partnership and with the help of Artificial Intelligence AI.