China-Cyberattacks/Asian Winter Games

China reports foreign cyberattacks on Asian Winter Games computer systems

  • English

Shotlist


FILE: Harbin City, Heilongjiang Province, northeast China - February 2025 (CCTV - No access Chinese mainland)
1. Aerial shot of Harbin Ice and Snow World
2. Aerial shot of poster at venue of 9th Asian Winter Games

Tianjin Municipality, north China - Recent (CCTV - No access Chinese mainland)
3. Screen showing logos of China's National Computer Virus Emergency Response Center
4. Various of engineers working at computers
5. SOUNDBITE (Chinese) Du Zhenhua, senior engineer, China's National Computer Virus Emergency Response Center (partially overlaid with shot 6):
"Since the first ice hockey match on Feb 3, our cybersecurity team detected a continuous surge in abnormal network traffic targeting the Games' information systems, including extensive asset probing, port scanning, and vulnerability exploitation attacks."
++SHOT OVERLAYING SOUNDBITE++
6. Various of Du writing on whiteboard, others in meeting
++SHOT OVERLAYING SOUNDBITE++
7. Various of Du, others in meeting, attendees taking notes
8. SOUNDBITE (Chinese) Du Zhenhua, senior engineer, China's National Computer Virus Emergency Response Center (ending with shots 9-15):
"The attackers primarily targeted three critical systems: the competition information release system, arrival and departure management system, and payment card system. These systems are vital for the press release of important event information, the coordination of personnel and materials, and the overall organization and management of the event, containing sensitive data. The attacks had dual purposes, which are stealing confidential information and disrupting event operations through system sabotage."

FILE: Harbin City, Heilongjiang Province, northeast China - February 2025 (CCTV - No access Chinese mainland)
9. Various of signs for "Asian Winter Games Channel" at customs clearance counter
10. Volunteers assisting travelers
11. Traveler filling in form
12. Signs of "Asian Winter Games Channel"

FILE: China - Exact Location and Date Unknown (CCTV - No access Chinese mainland)
13. Various of computer screen showing code
14. Various of wires, computing facilities

Tianjin Municipality, north China - Recent (CCTV - No access Chinese mainland)
15. Various of engineers working at computers
16. SOUNDBITE (Chinese) Du Zhenhua, senior engineer, China's National Computer Virus Emergency Response Center (ending with shot 17):
"[Our analysis shows] the primary source of cyberattacks on Games systems is the United States, with over 170,000 attacks, accounting for more than 60 percent of the total. As for the cyberattacks on the critical information infrastructure of Heilongjiang Province, the majority of these attacks come from the Netherlands, with more than 30 million incidents."

FILE: Harbin City, Heilongjiang Province, northeast China - February 2025 (CCTV - No access Chinese mainland)
17. Aerial shot of square, park
18. Tourists posing for photo in front of snow sculpture

Tianjin Municipality, north China - Recent (CCTV - No access Chinese mainland)
19. Police officer writing
20. SOUNDBITE (Chinese) Sun Lifu, deputy director, Harbin Municipal Public Security Bureau (starting with shot 19):
"The public security agencies have received complete data on the attacks from CVERC and the Games' cybersecurity team. We will deploy specialized technical units to thoroughly trace the attackers and take resolute legal action against them."
21. Various of police officers working

Storyline


China's National Computer Virus Emergency Response Center (CVERC) disclosed on Thursday that the 9th Asian Winter Games' information systems suffered over 270,000 cyberattacks during the event, with most originating from overseas.

According to a technical analysis report, the cyberattacks started to surge on Feb 3, the first day of competition in the 9th Asian Winter Games.

"Since the first ice hockey match on Feb 3, our cybersecurity team detected a continuous surge in abnormal network traffic targeting the Games' information systems, including extensive asset probing, port scanning, and vulnerability exploitation attacks," said Du Zhenhua, a senior engineer at CVERC.

Cybersecurity experts revealed that the attacks primarily employed network probing and scanning techniques to identify system vulnerabilities, followed by exploitation of known security flaws to infiltrate networks.

Forensic analysis of the attackers' methods confirmed their primary focus was the Games' core event management systems.

"The attackers primarily targeted three critical systems: the competition information release system, arrival and departure management system, and payment card system. These systems are vital for the press release of important event information, the coordination of personnel and materials, and the overall organization and management of the event, containing sensitive data. The attacks had dual purposes, which are stealing confidential information and disrupting event operations through system sabotage," Du said.

According to the report, the Asian Winter Games' event information systems suffered 270,167 cyberattacks from overseas between Jan 26 and Feb 14, 2025. The attacks followed a fluctuating upward trend, with a sharp surge from the Games' opening on Feb 7 until the closing phase on Feb 13. The peak occurred on Feb. 8.

During the event, cybersecurity teams blocked 12,602 high-risk malicious IP addresses that were involved in malicious scanning, vulnerability exploitation, and attempts to infiltrate systems, steal data, or sabotage operations. Most attacks originated from foreign cloud service hosts.

"[Our analysis shows] the primary source of cyberattacks on Games systems is the United States, with over 170,000 attacks, accounting for more than 60 percent of the total. As for the cyberattacks on the critical information infrastructure of Heilongjiang Province, the majority of these attacks come from the Netherlands, with more than 30 million incidents," Du said.

Du said that, based on previous analysis, such a pattern is consistent with U.S. intelligence agencies using European hosts as proxies.

"The public security agencies have received complete data on the attacks from CVERC and the Games' cybersecurity team. We will deploy specialized technical units to thoroughly trace the attackers and take resolute legal action against them," said Sun Lifu, Deputy Director of the Harbin Public Security Bureau.

DOWNLOAD
  • ID : 8422539
  • Dateline : April 3, 2025/Recent/File
  • Location : China
  • Category : Other
  • Duration : 2'31
  • Audio Language : Chinese/Nats/Part Mute
  • Source : China Central Television (CCTV)
  • Restrictions : No access Chinese mainland
  • Published : 2025-04-03 23:38
  • Last Modified : 2025-04-04 05:16:46
  • Version : 4

China-Cyberattacks/Asian Winter Games

China reports foreign cyberattacks on Asian Winter Games computer systems

Dateline : April 3, 2025/Recent/File

Location : China

Duration : 2'31

  • English


FILE: Harbin City, Heilongjiang Province, northeast China - February 2025 (CCTV - No access Chinese mainland)
1. Aerial shot of Harbin Ice and Snow World
2. Aerial shot of poster at venue of 9th Asian Winter Games

Tianjin Municipality, north China - Recent (CCTV - No access Chinese mainland)
3. Screen showing logos of China's National Computer Virus Emergency Response Center
4. Various of engineers working at computers
5. SOUNDBITE (Chinese) Du Zhenhua, senior engineer, China's National Computer Virus Emergency Response Center (partially overlaid with shot 6):
"Since the first ice hockey match on Feb 3, our cybersecurity team detected a continuous surge in abnormal network traffic targeting the Games' information systems, including extensive asset probing, port scanning, and vulnerability exploitation attacks."
++SHOT OVERLAYING SOUNDBITE++
6. Various of Du writing on whiteboard, others in meeting
++SHOT OVERLAYING SOUNDBITE++
7. Various of Du, others in meeting, attendees taking notes
8. SOUNDBITE (Chinese) Du Zhenhua, senior engineer, China's National Computer Virus Emergency Response Center (ending with shots 9-15):
"The attackers primarily targeted three critical systems: the competition information release system, arrival and departure management system, and payment card system. These systems are vital for the press release of important event information, the coordination of personnel and materials, and the overall organization and management of the event, containing sensitive data. The attacks had dual purposes, which are stealing confidential information and disrupting event operations through system sabotage."

FILE: Harbin City, Heilongjiang Province, northeast China - February 2025 (CCTV - No access Chinese mainland)
9. Various of signs for "Asian Winter Games Channel" at customs clearance counter
10. Volunteers assisting travelers
11. Traveler filling in form
12. Signs of "Asian Winter Games Channel"

FILE: China - Exact Location and Date Unknown (CCTV - No access Chinese mainland)
13. Various of computer screen showing code
14. Various of wires, computing facilities

Tianjin Municipality, north China - Recent (CCTV - No access Chinese mainland)
15. Various of engineers working at computers
16. SOUNDBITE (Chinese) Du Zhenhua, senior engineer, China's National Computer Virus Emergency Response Center (ending with shot 17):
"[Our analysis shows] the primary source of cyberattacks on Games systems is the United States, with over 170,000 attacks, accounting for more than 60 percent of the total. As for the cyberattacks on the critical information infrastructure of Heilongjiang Province, the majority of these attacks come from the Netherlands, with more than 30 million incidents."

FILE: Harbin City, Heilongjiang Province, northeast China - February 2025 (CCTV - No access Chinese mainland)
17. Aerial shot of square, park
18. Tourists posing for photo in front of snow sculpture

Tianjin Municipality, north China - Recent (CCTV - No access Chinese mainland)
19. Police officer writing
20. SOUNDBITE (Chinese) Sun Lifu, deputy director, Harbin Municipal Public Security Bureau (starting with shot 19):
"The public security agencies have received complete data on the attacks from CVERC and the Games' cybersecurity team. We will deploy specialized technical units to thoroughly trace the attackers and take resolute legal action against them."
21. Various of police officers working


China's National Computer Virus Emergency Response Center (CVERC) disclosed on Thursday that the 9th Asian Winter Games' information systems suffered over 270,000 cyberattacks during the event, with most originating from overseas.

According to a technical analysis report, the cyberattacks started to surge on Feb 3, the first day of competition in the 9th Asian Winter Games.

"Since the first ice hockey match on Feb 3, our cybersecurity team detected a continuous surge in abnormal network traffic targeting the Games' information systems, including extensive asset probing, port scanning, and vulnerability exploitation attacks," said Du Zhenhua, a senior engineer at CVERC.

Cybersecurity experts revealed that the attacks primarily employed network probing and scanning techniques to identify system vulnerabilities, followed by exploitation of known security flaws to infiltrate networks.

Forensic analysis of the attackers' methods confirmed their primary focus was the Games' core event management systems.

"The attackers primarily targeted three critical systems: the competition information release system, arrival and departure management system, and payment card system. These systems are vital for the press release of important event information, the coordination of personnel and materials, and the overall organization and management of the event, containing sensitive data. The attacks had dual purposes, which are stealing confidential information and disrupting event operations through system sabotage," Du said.

According to the report, the Asian Winter Games' event information systems suffered 270,167 cyberattacks from overseas between Jan 26 and Feb 14, 2025. The attacks followed a fluctuating upward trend, with a sharp surge from the Games' opening on Feb 7 until the closing phase on Feb 13. The peak occurred on Feb. 8.

During the event, cybersecurity teams blocked 12,602 high-risk malicious IP addresses that were involved in malicious scanning, vulnerability exploitation, and attempts to infiltrate systems, steal data, or sabotage operations. Most attacks originated from foreign cloud service hosts.

"[Our analysis shows] the primary source of cyberattacks on Games systems is the United States, with over 170,000 attacks, accounting for more than 60 percent of the total. As for the cyberattacks on the critical information infrastructure of Heilongjiang Province, the majority of these attacks come from the Netherlands, with more than 30 million incidents," Du said.

Du said that, based on previous analysis, such a pattern is consistent with U.S. intelligence agencies using European hosts as proxies.

"The public security agencies have received complete data on the attacks from CVERC and the Games' cybersecurity team. We will deploy specialized technical units to thoroughly trace the attackers and take resolute legal action against them," said Sun Lifu, Deputy Director of the Harbin Public Security Bureau.

ID : 8422539

Published : 2025-04-03 23:38

Last Modified : 2025-04-04 05:16:46

Source : China Central Television (CCTV)

Restrictions : No access Chinese mainland

More



Login
Username
Password
code
Sign In
OK