Skip to content

Information/Technology

ESET Uncovers New China-Linked APT “GopherWhisper” Leveraging Legitimate Platforms

Researchers from the Slovak cybersecurity firm ESET have identified a previously unknown China-linked advanced persistent threat (APT) group dubbed GopherWhisper. The group leverages legitimate platforms—including Discord, Slack, Microsoft 365 Outlook, and file-sharing services—to carry out command-and-control (C&C) communications and data exfiltration.

Active since at least November 2023, the group is believed to operate from China based on timestamp analysis of chat logs and email activity. It deploys a suite of custom malware tools—primarily written in Go—using injectors and loaders to install backdoors and facilitate cyber-espionage.

Among the identified tools are several backdoors, including LaxGopher, RatGopher, BoxOfFriends, and SSLORDoor, as well as a data exfiltration tool, an injector, and a malicious DLL. Notably, the malware exhibits no code or tactical overlap with previously known threat actors, leading ESET to classify it as a distinct new APT group.

The campaign was first uncovered in January 2025 within a Mongolian government system, where the LaxGopher backdoor was observed using Slack for C&C operations. Subsequent analysis indicates that, in addition to the Mongolian target, dozens of other organizations may have been affected.

Source: Epoch Times, April 26, 2026
https://www.epochtimes.com/gb/26/4/25/n14749648.htm

Documents on China’s Crackdown on Cross-Border Internet Access and VPN Use

Recently, based on reports from some internet users, the Chinese government launched a new and strict crackdown in early April 2026 targeting cross-border internet access and censorship circumvention (such as Virtual Private Network (VPN) use). Unlike previous scattered blocking efforts, this campaign appears highly coordinated across multiple government departments and involves more aggressive technical restrictions.

Leaked or reported documents (shared by China Digital Times) suggest the following:

  1. Cyberspace Administration of China (CAC)
    The CAC scheduled a meeting on April 16 to study and implement President Xi Jinping’s “cyber power” strategy, inviting relevant officials to attend.
  2. Ministry of Industry and Information Technology (MIIT)
    A meeting was held on April 7 with major telecom companies (China Telecom, China Mobile, China Unicom) to strengthen regulation of cross-border data lines and prevent unauthorized internet connections.
  3. Shaanxi Telecom and CDN provider notice
    A directive ordered a complete ban on all overseas internet traffic, including Hong Kong, Macau, Taiwan, and other countries. It also strictly prohibited any VPN or proxy-related services. Key requirements and consequences:
    • All IPs must block access to non-mainland destinations
    • Immediate self-inspections for VPNs, proxies, or abnormal traffic
    • Violations will result in instant service termination and IP bans
    • No refunds or compensation will be provided
    • Users are responsible for backing up their data
    • Restoration of services is uncertain and depends on telecom authorities

Source: China Digital Times, April 8, 2026
https://chinadigitaltimes.net/chinese/726411.html

People’s Daily: China’s “Lightning” Robot Shatters Records at 2026 Beijing Humanoid Half Marathon

People’s Daily recently published an article highlighting the achievements of China’s robotics industry in the humanoid half marathon, emphasizing two key technological advances over the past year.

At the 2026 Beijing E-Town Humanoid Robot Half Marathon, a Chinese robot named “Lightning,” developed by the “Qitian Dasheng” (Monkey King) team, completed the race in 50 minutes and 26 seconds—surpassing the human men’s half-marathon world record and finishing in less than one-third of last year’s winning robot time.

Just one year ago, Chinese robots struggled on the course and were mocked by some foreign media as far from mature. Today, they are capable of stable, high-speed performance, largely due to the effective integration of existing technologies.

Key advancements include:

  • BeiDou Navigation System:
    Whereas most robots previously relied on remote control, nearly 40 percent now feature autonomous navigation. BeiDou enables them to follow routes and avoid obstacles without human intervention.
  • Liquid Cooling Technology:
    High-speed running can cause joint overheating and mechanical failure. Engineers have adapted mature smartphone liquid-cooling technology to develop a “capillary-level” cooling system, ensuring reliable performance during prolonged, high-intensity operation.

Source: People’s Daily, April 23, 2026
https://www.peopleapp.com/column/30051972714-500007457951

Ordinary Chinese Citizens Now Caught in Facial Recognition Dragnet

France’s Le Monde reported this week that ordinary Chinese citizens with no criminal or political history are receiving fines through automated facial recognition cameras, marking a notable expansion of the country’s vast surveillance apparatus into everyday life.

For years, many Chinese assumed large-scale monitoring was reserved for political dissidents, NGO workers, or activists. That assumption is now being challenged. Shanghai resident Li Yan (a pseudonym) describes himself as an entirely unremarkable citizen — no political involvement, no suspicious associations. Yet in late March, he received a police text message fining him 50 yuan (approximately $6.90 USD) for briefly riding his bicycle on a sidewalk. No officer stopped him. His bicycle had no license plate. The message cited “electronic technology” as the method of identification. After confirming with police that his face had been automatically matched through a public security camera, Li came to a quiet but unsettling realization: the anonymous space that once allowed people to get away with life’s small imperfections may be disappearing.

Le Monde notes that surveillance cameras now blanket China’s streets, though official numbers are never disclosed. Most citizens had grown accustomed to them, assuming the systems targeted others. But applying facial recognition to petty violations has drawn fresh attention. Notably, apps like WeChat and Alipay already enable near-total movement tracking, and online speech is routinely filtered. When a prominent law professor raised concerns about Beijing’s 2025 unified digital identity system, her social media account was suspended and her posts deleted.

Facial recognition in China already extends far beyond law enforcement — airports like Shanghai Hongqiao allow boarding without tickets, and gyms identify members from several meters away. Shanghai’s police began piloting facial recognition fines for unlicensed vehicles as early as 2017, but the system has since expanded dramatically. In the Xuhui district alone, 120 dedicated cameras now target cycling and scooter violations.

“This is just the beginning,” Li said. “If someone as insignificant as me can be automatically identified on any street, imagine where this is heading.”

Source: Radio France International, April 22, 2026
https://rfi.my/CdPy

U.S. Blocks Chinese Firm’s Acquisition of Dutch LED Company Over Security Concerns

China’s LED chipmaker San’an Optoelectronics has abandoned its $239 million plan to acquire Dutch firm Lumileds after the Committee on Foreign Investment in the United States (CFIUS) determined the deal posed “unresolvable national security risks.” Following multiple rounds of review, both parties withdrew the application on April 17, 2026.

The deal, announced in 2025 with Malaysian partner Inari Amertron, aimed to acquire Lumileds’ global operations, including production facilities in Singapore and Malaysia, to support San’an’s overseas expansion and strengthen its ability to serve international customers. Lumileds specializes in high-end LED products used in automotive lighting, camera flashes, and specialty applications.

The failed acquisition marks another setback for Chinese tech firms’ overseas investments amid increasing regulatory scrutiny, following the dispute involving Nexperia. It is also the second time CFIUS has blocked a Chinese-related bid for Lumileds, after rejecting a similar acquisition in 2016 over concerns about control of dual-use semiconductor technologies.

Source: Epoch Times, April 18, 2026
https://www.epochtimes.com/b5/26/4/17/n14743885.htm

People’s Daily: China Advances “Space Computing” to Support Future AI and Data Needs

China is accelerating the development of “space computing,” an approach that places data centers and AI processing capabilities on satellites, allowing data to be processed directly in orbit rather than transmitted back to Earth.

At the recent “2026 Space Computing Industry Conference,” China’s Ministry of Industry and Information Technology stated that it will support forward-looking research in space computing technologies and promote the development of an industry ecosystem. China also established its first collaborative platform for the sector—the “Space Computing Professional Committee.”

Space computing enables satellites to analyze and process data in real time, reducing transmission demands and improving efficiency. It includes models such as space (in-orbit) data processing, ground data processing, and integrated space–ground computing networks. Compared with ground-based data centers, space systems offer broader territorial coverage and stronger real-time capabilities.

Although initial costs—such as satellite launches and hardware—are high, long-term advantages include lower energy consumption, thanks to solar power and natural cooling in space, as well as reduced data transmission costs. Estimates suggest that a space-based computing center could reach cost parity with ground-based facilities within about 15 years.

China views space computing as a strategic frontier, driven by rapidly growing demand for computing power in areas such as AI, autonomous driving, and remote sensing. The country is already among the global leaders in deploying space-based computing networks and aims to leverage its early-mover advantage to strengthen its position in next-generation digital and aerospace industries.

Source: People’s Daily, April 10, 2026
http://finance.people.com.cn/n1/2026/0410/c1004-40698717.html

China Launches “Space Refueling Station” Satellite

On March 16, China successfully launched the “Hunan University of Science and Technology No. 2” satellite aboard a Kuaizhou-11 rocket from the Jiuquan Satellite Launch Center. The satellite entered its designated orbit and deployed its solar panels shortly after liftoff. It is China’s first spacecraft designed to extend the lifespan of other satellites by testing in-orbit refueling technologies.

The mission aims to demonstrate how to refuel satellites that have exhausted their fuel, addressing a growing challenge as the number of satellites—especially large constellations—continues to rise. Many satellites remain functional but are retired due to fuel depletion. The project seeks to reduce operational costs and improve the sustainability of space activities. Jointly developed by Hunan University of Science and Technology and a commercial aerospace company, the satellite is equipped with a flexible robotic arm capable of safely docking with target satellites for refueling. The arm mimics the movement of an elephant trunk or octopus tentacle, allowing for adaptable, low-impact contact that reduces the risk of collision.

In addition, the satellite carries an innovative “drag balloon” device designed to help mitigate space debris. The device inflates into a large, lightweight sphere, significantly increasing atmospheric drag and accelerating the reentry of any satellite that is at its final stage. This could shorten the deorbiting process from decades to about one year, offering a low-cost and scalable solution for disposing of defunct satellites and improving long-term orbital sustainability.

Source: People’s Daily, March 23, 2026
http://finance.people.com.cn/BIG5/n1/2026/0323/c1004-40686768.html

China Tightens Grip on Cross-Border Internet Access

Several leaked internal documents — four to five in total — circulating on overseas social media reveal that China’s central internet regulator and its three major state telecom operators are intensifying control over cross-border internet connections, affecting both businesses and individuals.

On April 2, China’s Cyberspace Administration of China (CAC) issued a notice convening a seminar on “Xi Jinping’s important thoughts on building a strong cyber nation,” requiring attendees to surrender their phones and remain in place. A separate notice from the Ministry of Industry and Information Technology called on representatives from the three major telecom operators to attend a related meeting. Both notices referenced cross-border dedicated data lines, and sources told reporters that authorities are now investigating “non-compliant” cross-border connections, including dedicated lines and data center relay links, demanding that responsible parties bring documentation and report back within a set timeframe.

On April 6, a technology company in Suzhou, Jiangsu province received an official notice announcing a special crackdown on cross-border internet access starting April 2026. Under the new rules, non-compliant connections will be cut immediately without any grace period for rectification. A network engineer at the firm, identified by the pseudonym Yu Min, noted the sharp shift in approach: where authorities once issued warnings or allowed time to fix violations, they now cut service outright. He warned the crackdown could expand further.

In Shaanxi province, companies received an emergency notice ordering a blanket ban on all overseas traffic — including connections to Hong Kong, Macau, and Taiwan — and prohibiting VPN and proxy services entirely. Companies must self-audit, and any violations will result in immediate IP blocking with no refunds and no service restoration.

A network technician in Shenzhen told reporters that restrictions on overseas websites have begun appearing across multiple regions in recent days. He noted that in some areas internet speeds are being throttled, VPNs are being detected, and individuals caught circumventing the firewall could face fines or even detention for sharing overseas content domestically.

Source: Radio Free Asia, April 9, 2026
https://www.rfa.org/mandarin/shehui/2026/04/09/china-internet-vpn-block-greatfirewall/