Report finds PLA units sought restricted US cybersecurity and network gear

In short: A new analysis of public Chinese military purchasing records says some PLA units repeatedly tried to buy restricted or sensitive US technology, including antivirus software and Cisco network hardware.

What's going on

Recorded Future’s Insikt Group reviewed six years of People’s Liberation Army (PLA) procurement records and public tender notices. It found multiple cases where PLA units openly listed foreign technology in official buying documents, even though the items are often controlled or sensitive.

The report highlights six procurement documents tied to PLA Strategic Support Force Unit 61419. In them, the unit sought English-language versions of well-known foreign antivirus products. Antivirus software is a tool meant to spot and block malicious programs, like a security guard for your computer. Insikt said choosing English versions, rather than Chinese ones, looks less like normal defense and more like an attempt to study the software.

The timing also stands out. China’s central government stopped approving foreign antivirus for regular government use in 2014, when firms like Kaspersky and Symantec were removed from an official supplier list. That makes later PLA efforts to obtain foreign antivirus seem out of step with normal policy, according to the analysis.

Insikt also found a contract award notice showing the purchase of Cisco routers and other communications gear, linked to the same address and point of contact used in the antivirus documents. Routers are devices that direct internet traffic, like sorting stations for data moving between networks.

What to watch

These findings add context to tighter US export controls that aim to stop sensitive items, including advanced chips used for AI, from reaching Chinese military-linked groups. Watch for more enforcement actions, and for further reporting that connects procurement paperwork to real-world deliveries and use.

Source: NYTimes