The Ministry of National Security clarifies: What is "cyber espionage"? What should I do if I encounter it? Spy | Country | Network

September 11th to 17th this year is the 10th National Cybersecurity Awareness Week, with the theme of "Cybersecurity for the People, Cybersecurity relies on the People". Currently, cyberspace has become one of the main channels for espionage, theft, and destruction activities. Cyberespionage activities have the characteristics of "low cost, high profit", "indiscriminate, all-weather", etc., which pose serious risks and practical hazards to China's national security.

So, what is "cyber espionage"? What should I do when encountering "cyber espionage"? How will national security agencies deal with "cyber espionage"?

If you also have such questions, the newly revised Anti Spy Law will answer them for you——

What is "cyber espionage"?

Article 4 of the Anti Espionage Law stipulates that cyber espionage refers to "activities such as cyber attacks, intrusion, interference, control, and destruction carried out by espionage organizations and their agents, or by domestic and foreign institutions, organizations, individuals colluding with them, targeting state organs, confidential units, or critical information infrastructure.". This regulation is reflected in "three specifics":

Specific subjects - i.e. behaviors related to espionage organizations and their agents;

Specific targets - specifically targeted at key areas such as government agencies, confidential units, or critical information infrastructure in our country;

Specific behaviors - that is, carrying out activities such as network attacks, intrusions, interference, control, destruction, etc.

What should we do if we discover "cyber espionage behavior"?

Article 16 of the Anti Espionage Law stipulates that "any citizen or organization who discovers espionage behavior shall promptly report it to the national security organs." At the same time, it is required that "the national security organs shall publicly disclose the telephone number, mailbox, network platform, etc. that accept the report to the society, handle the reported information in a timely manner in accordance with the law, and keep the informant confidential.".

Once citizens and organizations find cyber espionage, they should report it to the national security organs through 12339 reporting phone, online reporting platform, WeChat official account reporting channel of the Ministry of National Security, etc.

At the same time, in order to better investigate and deal with cyber espionage, Article 41 of the Anti Spy Law stipulates that logistics operators such as postal services and express delivery services, as well as telecommunications business operators and Internet service providers, should provide necessary support and assistance for national security organs to investigate espionage according to law.

How do national security agencies deal with "cyber espionage"?

According to Article 36 of the Anti Spy Law, if national security agencies discover risks such as network information content or cyber attacks involving espionage activities, they shall handle them according to the following procedures:

In general, according to the division of responsibilities stipulated in the Network Security Law, the relevant departments shall be notified in a timely manner, and the telecommunications business operators and Internet service providers shall be disposed of or ordered to take measures such as repairing loopholes, strengthening network protection, stopping transmission, eliminating procedures and contents, suspending relevant services, removing relevant applications, closing relevant websites, and keeping relevant records.

In case of emergency, if no immediate measures are taken that will cause serious harm to national security, the national security organs shall order relevant units to repair vulnerabilities, stop relevant transmission, suspend relevant services, and notify relevant departments.

After the risk is eliminated, national security organs and relevant departments should make timely decisions to restore relevant transmission and services, and protect the legitimate rights and interests of relevant enterprises and individuals in accordance with the law.

After investigation according to law, if "cyber espionage behavior" constitutes a crime, criminal responsibility shall be pursued in accordance with the law; If it does not yet constitute a crime, the national security organs shall impose administrative penalties such as warning, fine, confiscation, detention, etc. in accordance with the law, and may suggest relevant competent departments to make corresponding administrative sanctions in accordance with the law.

There are no outsiders involved in maintaining national security, and everyone should participate and contribute their efforts. Let's join hands to jointly maintain network security!