Wray Details China's Espionage, Fox Hunt Ops
FBI Director Wray outlined China's economic espionage, political influence operations, and the Fox Hunt intimidation program targeting expatriates and students.
Sourcefbi.gov — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
In a keynote at the Reagan Presidential Library, FBI Director Christopher Wray characterized the Chinese government as the foremost threat to U.S. economic security and democratic institutions, citing over 2,000 active FBI investigations into Chinese efforts to steal American information and technology. He described a multi-pronged strategy combining industrial espionage, cyber intrusion, and political influence operations, referencing a foiled plot against GE Aviation that combined hacking with insider theft, and noting the FBI's response to China's compromise of Microsoft Exchange servers (a reference to the widely reported Hafnium/Exchange exploitation campaign).
Wray also detailed the Chinese government's Fox Hunt program, which uses threats and intimidation against Chinese nationals and Chinese-American students and green card holders in the U.S., including threats against family members in China to silence dissent. He outlined FBI countermeasures including Cyber Task Forces, Counterintelligence Task Forces in every field office, and a National Counterintelligence Task Force, alongside increased information sharing with domestic and international partners.
This is a policy and awareness speech rather than a technical advisory — it contains no new indicators, malware details, or vulnerability disclosures, but reaffirms attribution of prior activity (including the Exchange server compromise) to the Chinese government and highlights ongoing transnational repression and economic espionage as strategic priorities for the Bureau.
Mentioned in this report
Source reporting: https://www.fbi.gov/news/stories/director-wray-addresses-threats-posed-to-the-us-by-china-020122
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the actors and campaigns it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,436 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs