China's Ministry of State Security Exposes Foreign Operatives Posing as Experts to Steal Sensitive Information Online

MSS Uncovers Online Espionage Tactics

China's Ministry of State Security (MSS) announced on Sunday, February 1, 2026, that it has uncovered instances of foreign intelligence operatives posing as industry experts and investment advisers to infiltrate professional online groups. The operatives reportedly exploited members' trust to steal sensitive information, including key technical data and internal policymaking details. This disclosure underscores the evolving methods employed by foreign intelligence agencies to gather intelligence within China.

Deceptive Infiltration of Online Communities

According to the MSS, these foreign agents utilized various guises to penetrate online communities. They established or joined groups under seemingly legitimate labels such as 'academic seminars' or 'industry exchanges'. Within these forums, they incited members to share internal documents and policy developments across professional boundaries, effectively transforming spaces intended for knowledge exchange into conduits for illicit information gathering. The MSS noted that some groups recruited members from sensitive units, violating relevant regulations and facilitating the improper exchange of interests.

Broader Spectrum of Espionage Threats

The recent disclosure is part of a broader series of warnings from the MSS regarding diverse foreign espionage tactics. In recent months, the Ministry has highlighted several other methods used by foreign intelligence agencies:

• Phishing Emails: Foreign spies have sent thousands of phishing emails targeting Communist Party and government organs, national defense and military industrial units, as well as universities and research institutes. These emails often contain malicious software designed to compromise systems and steal data.
• Malicious Wi-Fi Networks: Warnings have been issued about foreign spy agencies setting up malicious Wi-Fi networks in areas near government offices and classified institutions to steal data from public employees' devices.
• Deepfake Technology: The MSS also cautioned against foreign hostile forces using deepfake technology to generate and spread fabricated videos within China, aiming to mislead the public and create panic.
• Varied Cover Identities: Beyond online experts, foreign spies have been observed using identities such as scholars, tourists, businesspeople, and even 'insincere lovers' to conceal their true intentions and carry out activities that threaten national security.

Targeted Sensitive Information and Sectors

The intelligence sought by these operatives spans a wide range of sensitive areas. Beyond technical data and policymaking details from online groups, foreign intelligence agencies have intensified efforts to illegally obtain genetic data of key crops like soybeans, corn, and rice, posing a significant threat to China's food security. Military-related information is also a primary target, with cases involving individuals attempting to transmit such secrets to foreign agencies. The consistent targeting of government, military, and research sectors underscores the comprehensive nature of the perceived espionage threat.

Continued Vigilance and Counter-Espionage Efforts

The Ministry of State Security continues to emphasize the importance of public awareness and vigilance in countering foreign espionage. These ongoing disclosures and warnings reflect China's commitment to strengthening its national security framework against increasingly sophisticated and varied intelligence-gathering operations. The MSS aims to educate the public on recognizing and reporting suspicious activities to safeguard national interests.