Loading story…
MI5 issued an Espionage Alert alleging that the China General Technology Research Institute (CGTRI), also known as the China Academy of General Technology, funds academic work intended to improve the technical capabilities of China’s Ministry of State Security (MSS). The agency identified more than 100 academics linked to UK institutions who had contributed to CGTRI-funded projects, potentially without knowing the organization’s alleged intelligence-service connection. The work covered dual-use areas including artificial intelligence, cybersecurity, covert communications, and steganography.
MI5 urged universities and researchers to review present and planned CGTRI collaborations, trace Chinese funding sources, and apply UK government research-security guidance. It warned that assistance to, or material benefit received from, a foreign intelligence service can carry criminal liability under the National Security Act 2023. China rejected the allegations, while the alert underscores UK concern that opaque research funding can enable technology transfer to foreign intelligence services without broadly implicating Chinese researchers or academic cooperation.
TTPs, infrastructure, and targeting history in one profile.
7 events from the most recent confirmed update back to the earliest known activity.
MI5 urged UK academic institutions to review current and planned CGTRI collaborations, trace the ultimate source of Chinese research funding, and use government research-security guidance. It warned that assisting or receiving material benefit from a foreign intelligence service may carry criminal consequences under the National Security Act 2023.
MI5 issued an espionage alert stating that China General Technology Research Institute/China Academy of General Technology funds research intended to improve China’s Ministry of State Security technical capabilities. It identified more than 100 UK-linked academics who contributed to projects ultimately funded through CGTRI, potentially without knowing the funding source.
By March 2026, the Research Collaboration Advice Team reported more than 3,800 engagements with UK research institutions and more than 500 specific cases, including advice requests involving AI and communications technologies.
The UK Foreign Influence Registration Scheme came into force under the framework established by the National Security Act 2023.
The National Security Act 2023 modernized UK espionage and foreign-interference offenses and established the basis for the Foreign Influence Registration Scheme.
The UK National Security and Investment Act came into force, expanding government authority to examine national-security risks in transactions and acquisitions involving intellectual property and research-intensive sectors.
China rejected the British allegations concerning CGTRI and its alleged links to the Ministry of State Security.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See this adversary's TTPs, infrastructure, and targeting history, correlated against your exposure.
3 references tracked. Mallory keeps watching after this page renders.
theregister.com
Open sourceinfosecurity-magazine.com
Open sourcecybercenter.space
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
MI5 has issued an espionage alert to members of the UK Parliament, warning that Chinese intelligence operatives are using fake recruitment agents and social media platforms, particularly LinkedIn, to target individuals with access to sensitive government information. The alert, circulated by the speakers of both the House of Commons and House of Lords, specifically identified two LinkedIn profiles believed to be operated by Chinese Ministry of State Security (MSS) officers posing as legitimate headhunters. These efforts are part of a broader campaign to cultivate relationships with MPs, peers, parliamentary staff, and professionals involved in policy development, including economists and think tank staff. Security Minister Dan Jarvis emphasized that this activity represents a covert attempt by a foreign power to interfere in the UK's sovereign affairs and highlighted previous Chinese cyber-operations targeting parliamentary emails and other interference attempts. In response, the UK government is investing £170 million to upgrade encrypted technology for government business and introducing new measures to counter Chinese cybercrime and influence operations. Intelligence agencies in other countries, such as Australia, have also warned about the use of professional networking sites for espionage, underscoring the global nature of this threat.
Jul 12, 2026
A **UK-China Transparency** report says UK universities maintain **34 cyber-related partnerships** with Chinese institutions, including **13 links to universities closely tied to China’s defence research system**, creating significant research security risks. The report argues that the UK is more exposed than any other European country because its open civilian academic model is being paired with Chinese institutions operating within Beijing’s **military-civil fusion** framework. It highlights **Beijing University of Posts and Telecommunications (BUPT)** and **Beihang University** as high-risk examples, citing links between their cyber research, faculty, and China’s military, intelligence, and defence-industrial networks. The report identifies the **Queen Mary University of London-BUPT** relationship as the most deeply integrated UK-China cyber collaboration and says additional lower-visibility cooperation continues through co-authored research and strategic partnerships. It also points to Beihang’s joint cybersecurity laboratory with **Beijing Integrity Technology Co.**, a company sanctioned by the **US, UK, and EU** for facilitating activity linked to **Flax Typhoon**. The authors say the UK’s current research security regime remains largely advisory and call for stronger institutional controls, including dedicated research security officers, clearer high-risk organization guidance, financial support to unwind risky partnerships, and tighter travel security measures.
Jul 29, 2026
The Five Eyes intelligence alliance has warned that Chinese military intelligence services are using professional networking, recruitment, and freelance platforms including **LinkedIn**, **Indeed**, and **Upwork** to identify and cultivate people with access to sensitive government and military information. According to the joint bulletin, Chinese operatives pose as recruiters, consultants, think tanks, or HR firms, then build relationships with targets and gradually request increasingly sensitive reporting. The campaign is aimed not only at security clearance holders and active military personnel, but also at academics, journalists, freelance writers, think tank staff, and others whose unclassified knowledge of policy, strategy, capabilities, or installations can be combined into actionable intelligence. The advisory says communications often shift from mainstream platforms to encrypted messaging apps, while payments may be routed through services such as PayPal, Zelle, Wise, Western Union, and cryptocurrency. Officials said some targets have already provided information, leading in some cases to criminal prosecutions, revoked security clearances, and job losses. The warning builds on earlier MI5 alerts, including concerns about Chinese approaches to parliamentarians and a prior estimate that roughly 10,000 Britons were targeted over five years, while similar tactics have also been reported in the United States through fake consulting firms seeking information from former federal workers.
Jun 29, 2026