Living Off the Land: How China's Hackers Are Ghosting Your Defenses With Tools You Already Own

About this episode

The episode discusses how China's hackers are using existing tools to bypass defenses and the implications for cybersecurity.

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. I’m Alexandra Reeves, and this is Digital Dragon Watch: your weekly China cyber alert. Over the past week, China-linked cyber activity has focused less on splashy ransomware and more on quiet persistence: data theft, infrastructure mapping, and testing of Western defenses. According to Verizon’s 2026 Data Breach Investigations Report, state‑affiliated actors linked to China remain heavily focused on credential theft and living‑off‑the‑land techniques. Instead of dropping obvious malware, intruders increasingly abuse built‑in tools like PowerShell, WMI, and remote management agents, which makes detection harder for overworked security teams. Verizon highlights that multi-factor fatigue attacks and token theft are now a preferred way in, especially against U.S. government contractors and managed service providers. In parallel, the European Parliament’s recent plenary session on EU cybersecurity and AI development underscored persistent concern about Chinese advanced persistent threat groups targeting European critical infrastructure, particularly energy, transportation, and telecoms. Lawmakers pointed directly to…

People in this episode

Host: Alexandra Reeves

Topics covered

• China cyber activity
• credential theft
• living-off-the-land techniques
• cybersecurity
• infrastructure mapping
• AI-enhanced intrusion tools

Keywords

• China cyber threats
• data theft
• PowerShell
• WMI
• multi-factor fatigue attacks
• advanced persistent threats
• cybersecurity risks

Mentioned in this episode

Organizations: Verizon, European Parliament, METR

Places: U.S., Europe

More episodes of Digital Dragon Watch: Weekly China Cyber Alert

• Dragon's Shopping Spree: Beijing's 29-Minute Smash and Grab Hits AI Labs and Logistics Giants · June 10, 2026 · 4 min
• Dragons in the Banquet Hall: China's Cyber Spies Are Hiding in Your Trusted Software and Nobody Saw It Coming · June 8, 2026 · 3 min
• Dragon Routers and AI Phishing: Why Beijing Wants Your Boring Water Utility More Than Your Secrets · June 7, 2026 · 4 min
• LinkedIn Lures and Cloud Ghosts: Why Chinese Spies Are Sliding Into Your DMs With Fake Job Offers · June 5, 2026 · 3 min
• China's Cloudy with a Chance of Espionage: Azure Blobs, Rust Loaders, and Why Your LNK Files Need Therapy · June 3, 2026 · 4 min
• Alexandra Reeves Spills Tea on China's AI Cyber Weapon and Beijing's Power Move That Killed a Zambian Tech Summit · May 4, 2026 · 4 min