Signal

China-linked cyberespionage operation affects 53 telecoms and governments

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-02-26 11:18 UTCUpdated 2026-02-26 18:28 UTC
rss
securitybankinfosecurity_cso_online
Source links open
Source links and full evidence are open here. Pro adds archive history, compare-over-time, alerts, exports, and workflow. Business adds Feed API integrations and team usage.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.
4 top sources shown
Overview

A China-linked cyberespionage operation has been uncovered, affecting 53 telecom and government organizations across 42 countries. Google reported that the group, known as UNC2814, has been active since 2017 and utilized Google Sheets for command-and-control purposes.

Score total
1.21
Momentum 24h
4
Evidence documents
-
Independent publishers
-
Independent origins
-
Primary sources
-
Secondary sources
-
Source types
-
Duplicate ratio
0%
Why now
  • Recent disruptions indicate heightened activity from Chinese threat actors.
  • The use of Google Sheets as a hacking tool is a novel approach.
  • Increased scrutiny on international cyber operations amid geopolitical tensions.
Why it matters
  • Highlights ongoing cyber threats from state-sponsored actors.
  • Demonstrates innovative tactics using common tools for espionage.
  • Raises concerns over the security of global telecom infrastructure.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
  • Google has disrupted a China-linked espionage group that used Google Sheets for cyber operations.
  • The group, identified as UNC2814, has targeted telecom and government organizations globally since 2017.
How sources frame it
  • Google's Threat Intelligence Group: neutral
All evidence
All evidence
Suspected Chinese Cyberespionage Operation Hits 53 Telecoms
Bankinfosecurity · bankinfosecurity.com · 2026-02-26 18:28 UTC
Google Disrupts ‘Prolific’ and ‘Elusive’ China-Linked Global Hacking Campaign
Infosecurity Magazine · infosecurity-magazine.com · 2026-02-26 12:09 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 4Origin domains: 4Duplicates: -
Showing 4 / 4
Top publishers (this list)
  • Bankinfosecurity (1)
  • Therecord (1)
  • Infosecurity Magazine (1)
  • Csoonline (1)
Top origin domains (this list)
  • bankinfosecurity.com (1)
  • therecord.media (1)
  • infosecurity-magazine.com (1)
  • csoonline.com (1)