Beijing, Feb 13 (NationPress) China has been repeatedly accused by Western authorities and cybersecurity analysts of engaging in extensive offensive cyber operations, with these claims grounded in intelligence evaluations and forensic analysis post-cyber incidents.

The disclosed materials, which encompass source code, training data, and software resources, provide a rare glimpse into the foundational work that might enable such cyber assaults before they materialize, according to a report released on Friday.

Referring to a trove of leaked technical documents, cybersecurity news outlets like Recorded Future News highlighted that China seems to be utilizing a clandestine training platform aimed at mimicking cyberattacks on the vital infrastructure of its neighboring countries.

The internal documentation characterizes the training system as part of a larger integrated framework dubbed “Expedition Cloud,” which is intended to facilitate rehearsals of hacking simulations targeting the “actual network environments” of China’s principal operational adversaries in the South China Sea and Indochina regions.

“The leaked cache, initially reported by the specialized blog NetAskari, details the recreation of target computer networks utilized in energy, transportation, and smart home sectors. It emphasizes the assessment of operations by ‘reconnaissance groups’ and ‘attack teams’ against these networks, with no mention of defensive roles,” the report from Recorded Future News elaborated.

“Practicing assaults on critical infrastructure could provide China with a strategic edge by allowing cyber operations to be meticulously prepared and rehearsed rather than improvised under pressure. Experts noted that the architecture of the system also suggests an increased reliance on artificial intelligence in cyber warfare, a transition that could further enhance the capabilities of China’s already substantial cyber forces,” it continued.

The report indicates that the presence of such a platform, which focuses on offensive capabilities over defensive ones, raises questions about the repeated claims from Chinese officials denying government involvement in cyber attacks.

A deeper investigation into how the system categorizes and dissects cyber operations within replicas of adversary networks is crucial for understanding the implications of the leaked documents.

“The platform organizes training exercises for cyber assaults into two teams with distinct functions, employing templates that imitate target networks, allowing for the same scenarios to be replicated and evaluated repeatedly under controlled settings,” the report explained.

“Initially, a reconnaissance team is dispatched to survey the digital landscape, similar to scouts exploring terrain ahead of an advancing force. This team identifies existing systems on the network, which services or interfaces are exposed, and potential access points for the subsequent team,” it further explained.