> The threat actor—whom we assess with high confidence was a Chinese state-sponsored group—manipulated our Claude Code tool into attempting infiltration into roughly thirty global targets and succeeded in a small number of cases.
So why do we never hear of US sponsored hackers attacking foreign businesses? Or Swedish cyber criminals? Does it never happen? Are “Chinese” hackers just the only ones getting the blame?
I don't think many other countries have that combination of "don't care if others know" approach and level of state sponsorships. China really seems to do some spray and pray attacking private companies too. Same for Russia and NK. Compared to that, for example the "equation group" from the US seems really restrained and targeted.
If the US groups for example started doing ransomware at scale in China, we'd know about that really soon from the news.
The US government has hacked things in China. That you have not heard of something is not evidence that it doesn't exist.
North Korea also does plenty of hacking around the world. That's how they get a significant portion of their government budget, and they rely on cryptocurrency to support that situation.
Ukraine and Russia are doing lots of official and vigilante hacking right now.
Back in the mid 2000s, there was a guy who called himself "the jester" who was vaguely right wing and spent his time hacking ISIS stuff. My college interviewed him.
