Hunan Police Academy

Summary

Anonymous hackers breached multiple Chinese government websites, including the Hunan Police Academy, leaving defacement messages condemning authorities' suppression of Hong Kong pro-democracy protests. The attacks involved distributed denial-of-service disruptions and coincided with arrests of activists linked to cyber operations, while a separate surveillance effort used a malicious Android app to track protesters' movements.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On April 10, 2015, hacktivists associated with Anonymous targeted multiple Chinese government websites, including the Hunan Police Academy site, as part of "OperationChina." The attack was conducted in solidarity with pro-democracy protesters in Hong Kong. A hacker using the Twitter handle @AnonymousGlobo claimed responsibility for the breach, deploying a defacement page on the Hunan Police Academy website containing a message condemning the Chinese government's suppression of protests and arrests of demonstrators. The defacement served as both a political statement and proof of compromise. Concurrently, distributed denial-of-service (DDoS) attacks disrupted other Chinese government websites by overwhelming them with traffic, causing operational congestion. This mirrored Anonymous' 2014 cyber campaigns against Chinese infrastructure supporting Hong Kong protesters.

The attacks resulted in sustained disruption, with all targeted websites remaining compromised at the time of the article's publication. Chinese authorities responded by arresting five hacktivists accused of orchestrating the DDoS campaigns, characterizing the attacks as unlawful acts despite their non-destructive nature. The incident highlighted ongoing tensions between Chinese cybersecurity enforcement and hacktivist groups, particularly regarding digital protests aligned with Hong Kong's pro-democracy movement. Technical evidence, including defacement mirrors and compromised site links, was publicly shared via Pastebin to validate the breaches. No data theft or permanent damage to systems was reported, though the defacements and outages represented a symbolic challenge to state authority.

Sources

Sources available to members: 1 source.