According to CCTV, citing a report from China's National Computer Virus Emergency Response Center (CVERC), information systems for the Asian Winter Games experienced a large volume of cyberattack attempts between January 26 and February 14, 2025 [1]. The report described activities including scanning, file reading, and SQL injection targeting information release, arrival/departure management, and payment card systems [1]. The report stated that the attacks did not cause severe impacts on the games; this entry does not treat source IP locations directly as attacker nationality or confirmed state attribution [1].
Chinese Official Report Claims Harbin Asian Winter Games Information Systems Faced Massive Intrusion Attempts
2 min read
- Disclosed
- Apr 3, 2025
- Occurred
- Jan 26, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Media, entertainment & gaming
What to do nowOur advice
The report stated that the attacks did not cause severe impacts on the games; this entry does not treat source IP locations directly as attacker nationality or confirmed state attribution [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
The report stated that the attacks did not cause severe impacts on the games; this entry does not treat source IP locations directly as attacker nationality or confirmed state attribution [1].
Source excerpt: "A comprehensive analysis of overseas attacks against the Asian Winter Games event information systems and critical information infrastructure in Heilongjiang Province showed that attacks originating from countries and regions such as the United States and the Netherlands were relatively concentrated. Moreover, notably, in January 2025, an investigation report publicly disclosed by China's National Computer Network Emergency Response Technical Team/Coordination Center (CNCERT/CC) regarding cyberattacks by U.S. intelligence agencies against major Chinese technology enterprises explicitly pointed out that the United States frequently uses cloud hosts located in European countries such as the Netherlands and Germany as jump servers or bot hosts to launch attacks. In response, the cybersecurity protection team conducted detailed traceback analysis of the attack sources, and based on behavioral characteristics including techniques, tools, timing, and language, strongly suspected that the cyberattacks against event information systems and Heilongjiang critical information infrastructure during the Asian Winter Games were backed by the U.S. government." [1].
References
Media1
- [1]
“综合分析亚冬会赛事信息系统和黑龙江省关键信息基础设施遭境外攻击的情况, 来自美国、荷兰等国家和地区的攻击较为密集。 而且,值得注意的是,2025年1月,中国国家互联网应急中心公开披露的关于美国情报机构针对我国大型科技企业机构的网络攻击事件调查报告中明确指出, 美国频繁使用位于荷兰、德国等欧洲国家云主机作为跳板机或发起攻击的傀儡主机。 对此,网络安全保障团队对攻击来源进行详细分析回溯,综合网络攻击源头的手法、工具、时间、语言等行为特征, 高度怀疑此次涉亚冬会期间相关赛事信息系统和黑龙江省关键信息基础设施遭到的网络攻击具有美国政府支持的背景。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.