Google’s cybersecurity researchers have released findings detailing a sophisticated campaign by a China-linked threat actor targeting high-value research sectors. According to the report, the hackers are specifically infiltrating academic, medical, and military networks to gain access to computing resources. By running their own AI operations within these stolen networks, the attackers aim to blend their activities with legitimate traffic, making it significantly harder for security teams to identify and stop the intrusion.

The report highlights a shift in tactics, where the objective is not just data theft, but the exploitation of infrastructure to support the hackers' own technical projects. By leveraging the processing power of compromised institutions, the group can conduct complex operations while maintaining a lower profile than if they were using their own dedicated servers. While the report identifies the origin as China-linked, it does not explicitly state whether the group is acting on behalf of the state or as an independent entity. The findings underscore a growing trend in cyber warfare where AI research itself becomes both the target and the tool of malicious actors. Security experts note that this strategy complicates traditional defense measures, as the malicious activity is effectively 'hidden in plain sight' within trusted environments.