New Report Connects BIETA and CIII Research Firms to China’s MSS Cyber Activities

Published:

Oct 06, 2025Ravie LakshmananNetwork Security / Cyber Espionage

Unveiling Connections Between BIETA and China’s Ministry of State Security

Recent findings have surfaced regarding the Beijing Institute of Electronics Technology and Application (BIETA), indicating a strong potential affiliation with China’s Ministry of State Security (MSS). This connection arises from evidence suggesting that at least four employees at BIETA may have ties to MSS officials.

Key Personnel Under Scrutiny

The assessment identifies four key individuals—Wu Shizhong, He Dequan, You Xingang, and Zhou Linna—who appear to have direct or indirect links to the MSS. These personnel also have connections to the University of International Relations, an institution known for its ties to the MSS, as reported by Recorded Future.

BIETA’s Role in Technology Development

BIETA and its subsidiary, Beijing Sanxin Times Technology Co., Ltd. (CIII), are engaged in developing and implementing technologies that likely cater to various intelligence and military needs vital for China’s national security. According to the company’s disclosures, their research focuses on steganography, which plays a crucial role in covert communications and malware deployment, as well as forensic tools for counterintelligence.

Areas of Research and Development

The organization is involved in several advanced technological sectors, including:

  • Steganography: Techniques that enable covert methods of communication.
  • Forensic Investigation Tools: Equipment designed to aid in counterintelligence efforts.
  • Network Penetration Testing: Assessing security of computer networks.
  • Acquisition of Foreign Technologies: Gathering advancements in military communications and other areas.

The Historical Context of BIETA

Founded in some capacity since 1983, BIETA describes itself as a “research and development institution” that specializes in communication technologies and multimedia information security. As it has evolved, one of its focal points involves steganography, which is integral to clandestine communications.

CIII’s Technological Innovations

CIII has created software related to covert communication tactics and applications for cloud services like Baidu Cloud and OneDrive. These tools assist users in file sharing, while also conducting network simulations and penetration testing against a variety of platforms including mobile applications and IoT devices.

Recent Developments and Projects

In a notable project from November 2021, BIETA developed the Intelligent Discussion Android App, which includes features for identifying and blocking mobile phones in large settings, as well as intercepting messages and calls. Other offerings include tools for communication simulation, network functionality assessments, and the Datacrypt Hummingbird online storage software.

Implications for National and Cybersecurity

BIETA and CIII are believed to be integral parts of a network of front organizations supporting cyber operations for Beijing’s intelligence apparatus. The Mastercard-owned entity noted that these organizations focus on developing tools that enhance the capabilities of the MSS, which are then distributed to various state security departments.

Context of Rising Cyber Threats

These findings emerge shortly after cybersecurity firm Spur disclosed information about a Chinese proxy and VPN service named WgetCloud, previously known as GaCloud. This service has allegedly been leveraged in operations connected to the North Korean group known as Kimsuky. Such developments highlight the increasing risk associated with advanced persistent threat (APT) proxy infrastructures merging with commercial products, elevating cybersecurity concerns on a global scale.

As investigations into the relationship between BIETA and the MSS deepen, the implications for both national security and cybersecurity across the globe continue to grow. Understanding these links is crucial for organizations and individuals alike as they navigate the complex landscape of cyber threats and national intelligence operations.

CHAPTER X // CYBER AWARENESS CAMPAIGN
BEYOND THE BALLROOM
[C://ME] // CHAPTER X

REQUEST THE MEDIA KIT

Tell us where to send the Beyond the Ballroom media deck. Every field is required.

We will use these details to respond to your media-kit request. Privacy Policy

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

Arista Networks VeloCloud Orchestrator vulnerable to CVE-2026-114625, exploited in the wild

Arista Networks has reported a critical vulnerability, CVE-2026-114625, affecting its VeloCloud Orchestrator (VCO) products, with confirmed exploitation in the wild as of October 22,...

Hackers reportedly exploited PHP vulnerabilities days before public patch release

Recent findings reveal that hackers began exploiting critical vulnerabilities in PHP, known as PHP2Shell, four days before the public patch release on October 21....

New BlackX UEFI bootkit exploits Baton Drop vulnerability in targeted APT campaign

In early 2026, researchers identified a new UEFI bootkit, dubbed BlackX, that exploits the Baton Drop vulnerability (CVE-2022-21894) in a targeted APT campaign against...

Mirai botnet operators attempt to exploit PHP2Shell vulnerabilities, no confirmed breaches reported

In a concerning development, operators of the Mirai botnet have begun attempting to exploit critical vulnerabilities in PHP2Shell, following the release of emergency patches...