Beijing Institute alliance reshapes ransomware ecosystem operations
Threat Actor Meta
Summary
Hide ▲
Show ▼
BIETA and its subsidiary CIII were assessed as likely MSS front organizations, expanding China’s cyber-enabled intelligence ecosystem and strengthening support for covert operations. The finding matters because the firms appear to bridge research, tooling, and proxy tradecraft for intelligence, counterintelligence, and military missions.
Related Happenings
UK government FCA Bank of England and CMORG Issued a statement urging firms to actively manage frontier AI cyber risks and strengthen defenses for May 15 and ongoing
Public Sector Action
H score20
First: 18.05.2026 12:00
Last: 18.05.2026 12:00
Sources 1
About this happening:
The UK government, FCA, and Bank of England issued a May 15 statement telling UK financial services firms to actively manage frontier AI cyber risks, becau...
UK government FCA Bank of England and CMORG Issued a statement urging firms to actively manage frontier AI cyber risks and strengthen defenses for May 15 and ongoing
Public Sector ActionAbout this happening: The UK government, FCA, and Bank of England issued a May 15 statement telling UK financial services firms to actively manage frontier AI cyber risks, becau...
Phantom Taurus as a China-aligned espionage actor targeting government and telecoms
Threat Actor Meta
H score31
First: 30.09.2025 19:07
Last: 30.09.2025 19:07
Sources 1
About this happening:
Phantom Taurus has been formally classified by Palo Alto Networks Unit 42 as a China-aligned espionage actor targeting government agencies, embassies, military opera...
Phantom Taurus as a China-aligned espionage actor targeting government and telecoms
Threat Actor MetaAbout this happening: Phantom Taurus has been formally classified by Palo Alto Networks Unit 42 as a China-aligned espionage actor targeting government agencies, embassies, military opera...
Phantom Taurus Operation Diplomatic Specter espionage campaign
Campaign
H score34
First: 30.09.2025 19:07
Last: 30.09.2025 19:07
Sources 1
About this happening:
The Phantom Taurus campaign, also tracked as CL-STA-0043 and TGR-STA-0043 under Operation Diplomatic Specter, is a China-linked espionage operation targeting *...
Phantom Taurus Operation Diplomatic Specter espionage campaign
CampaignAbout this happening: The Phantom Taurus campaign, also tracked as CL-STA-0043 and TGR-STA-0043 under Operation Diplomatic Specter, is a China-linked espionage operation targeting *...
RedNovember-Storm-2077-TAG-100 alliance reshapes ransomware ecosystem operations
Threat Actor Meta
H score33
First: 24.09.2025 19:36
Last: 24.09.2025 19:36
Sources 1
About this happening:
Recorded Future has reclassified TAG-100 as RedNovember, clarifying a Chinese state-sponsored espionage actor also tracked by Microsoft as Storm-2077. The...
RedNovember-Storm-2077-TAG-100 alliance reshapes ransomware ecosystem operations
Threat Actor MetaAbout this happening: Recorded Future has reclassified TAG-100 as RedNovember, clarifying a Chinese state-sponsored espionage actor also tracked by Microsoft as Storm-2077. The...
RedNovember (Storm-2077) public-PoC espionage campaign
Campaign
H score31
First: 24.09.2025 04:00
Last: 24.09.2025 04:00
Sources 1
About this happening:
RedNovember is a suspected Chinese state-sponsored campaign also tracked as Storm-2077 that targeted perimeter appliances of high-profile organizations globally be...
RedNovember (Storm-2077) public-PoC espionage campaign
CampaignAbout this happening: RedNovember is a suspected Chinese state-sponsored campaign also tracked as Storm-2077 that targeted perimeter appliances of high-profile organizations globally be...
Timeline
-
06.10.2025 17:00 2 articles · 9mo ago
Recorded Future assesses BIETA and CIII as MSS-linked
Initial DisclosureRecorded Future assessed that the Beijing Institute of Electronics Technology and Application (BIETA) and its subsidiary, Beijing Sanxin Times Technology Co., Ltd. (CIII), are likely linked to China's Ministry of State Security (MSS) through personnel ties and connections to the University of International Relations, and said the firms research, develop, import, and sell steganography, covert communications, counterintelligence, malware-enabling, and network penetration testing capabilities that may support MSS cyber-enabled intelligence operations.
Show sources
- New Report Links Research Firms BIETA and CIII to China’s MSS Cyber Operations — thehackernews.com — 06.10.2025 17:00
- Chinese Gov't Fronts Trick the West to Obtain Cyber Tech — www.darkreading.com — 06.10.2025 17:09