Hackers working for the Chinese government have broken into telecoms networks to track Uighur travellers in Central and Southeast Asia, two intelligence officials and two security consultants who investigated the attacks told Reuters.
The hacks are part of a wider cyber-espionage campaign targeting “high-value individuals” such as diplomats and foreign military personnel, the sources said. But China has also prioritised tracking the movements of ethnic Uighurs, a minority mostly Muslim group considered a security threat by Beijing.
China is facing growing international criticism over its treatment of Uighurs in Xinjiang. Members of the group have been subject to mass detentions in what China calls “vocational training” centres and widespread state surveillance.
Beijing’s alleged cyberspace attacks against Uighurs show how it is able to pursue those policies beyond its physical borders.
As part of the campaign, different groups of Chinese hackers have compromised telecoms operators in countries including Turkey, Kazakhstan, India, Thailand and Malaysia, the four sources said.
Those countries are frequently used as transit routes by Uighurs to travel between Xinjiang and Turkey in what human rights activists say is an attempt to escape state persecution.
Beijing has said that such travellers may be going to fight for militant groups in Iraq and Syria, with Chinese officials saying that the measures in Xinjiang are needed to stem the threat of Islamist extremism.
China has repeatedly denied involvement in cyber-attacks or any mistreatment of the Uighur people, whose religious and cultural rights Beijing says are fully protected, and the Chinese Foreign Ministry said any hacking allegations need to be supported by evidence.
“We would again like to stress that China is a resolute safeguarder of internet security. We consistently and resolutely oppose and crack down on any forms of internet attacks,” a ministry statement said.
Reuters was not able to identify which specific telecoms operators were compromised. Government officials in India and Thailand declined to comment. Authorities in Malaysia, Kazakhstan and Turkey did not immediately respond to requests for comment.
US cyber-security company Volexity this week published a report detailing what it said were Chinese efforts to hack the phones and email accounts of Uighurs around the world.
Researchers at Google also said they had discovered a campaign by unknown parties to infect thousands of Apple iPhones, which sources told Forbes and TechCrunch was targeted at the Uighur community.