Cybersecurity heavyweight CrowdStrike Holdings (NASDAQ:CRWD) has sounded the alarm over a surge in cyberattacks from Chinese entities, specifically targeting U.S. tech firms to pilfer artificial intelligence technology.
A report by CrowdStrike, released on Tuesday, revealed that over 58% of state-sponsored cyberattacks on tech companies, particularly those possessing AI assets, are emanating from China. The cybersecurity firm noted, “China-nexus adversaries are escalating espionage against technology organizations to steal the AI capabilities and intellectual property they cannot build fast enough on their own.”
The report, encompassing events until March 31, suggested that U.S. restrictions on China’s access to AI training chips have impeded Beijing’s tech advancement. However, China has been formulating its own AI models to cut operating costs and provide nearly equivalent intelligence.
According to CrowdStrike, China-linked cyber groups continued targeting the technology sector, with SUNRISE PANDA focusing on East and Southeast Asian tech firms, MURKY PANDA launching password-spraying attacks against hundreds of mostly U.S.-based organizations, and WARP PANDA repeatedly exploiting vulnerabilities at North American tech companies to maintain long-term access.
CrowdStrike said the groups’ activities appear aimed at acquiring technology, intellectual property, and other information that supports the Chinese Communist Party’s intelligence-gathering objectives.
The firm also identified efforts by North Korea-linked actors to infiltrate IT workforces across North America, Europe, and Asia, largely to generate income for the regime.
China, North Korea Draw Scrutiny
This surge in cyberattacks comes on the heels of the U.S. Defense Department’s recent update to its "1260H list," which added companies suspected of having ties to China's military or defense-industrial sector. The list includes tech giants like Alibaba Group (NYSE:BABA), Baidu Inc. (NASDAQ:BIDU) and BYD (OTC:BYDDY).
On Tuesday, Chinese automaker NIO Inc. (NYSE:NIO) criticized the Trump administration‘s decision to add it to the CMC list, calling the designation unjustified and stating it would engage with the U.S. Department of Defense and pursue legal action if necessary. The company also denied any ties to the Chinese military or contributions to China’s defense industrial base.
Meanwhile, a former FBI agent, Stephanie Talamantez, told Benzinga that North Korea’s state-backed hackers are exceptionally persistent and dangerous, increasingly relying on sophisticated social engineering tactics. The group has reportedly stolen more than $2 billion in cryptocurrency in 2025, with U.S. officials alleging the proceeds help fund the country’s weapons and missile programs.
Disclaimer: This content was partially produced with the help of AI tools and was reviewed and published by Benzinga editors.
Image via Shutterstock
Login to comment