This week, a set of reports emerged alleging that Chinese state-backed actors perpetrated cyberattacks against foreign governments. In response, Chinese state media sprang into action by relaying official denials of responsibility, diverting attention to Western misconduct, and praising the benefits of China\u2019s relationship with the host country. A short analysis of local media coverage of the events highlights the traction of Chinese state-media narratives.<\/p>\n\n\n\n
On Wednesday, Reuters released an investigation concluding that Chinese actors hacked into several ministries and institutions of the Kenyan government, including its presidential office and National Intelligence Service (NIS). Aaron Ross, James Pearson, and Christopher Bing reported on the potential motivations and source of the hack<\/strong><\/a>:<\/p>\n\n\n\n Reuters could not determine what information was taken during the hacks or conclusively establish the motive for the attacks. But the defence contractor’s report said the NIS breach was possibly aimed at gleaning information on how Kenya planned to manage its debt payments.<\/p>\n\n\n\n […] The defence contractor, pointing to identical tools and techniques used in other hacking campaigns, identified a Chinese state-linked hacking team as having carried out the attack on Kenya’s intelligence agency.<\/p>\n\n\n\n The group is known as “BackdoorDiplomacy” in the cybersecurity research community, because of its record of trying to further the objectives of Chinese diplomatic strategy. [Source<\/strong><\/a>]<\/p>\n<\/blockquote>\n\n\n\n Chinese officials forcefully denied the allegations. Within hours, the Chinese embassy in Kenya published a press release<\/a> on its website calling the Reuters report \u201cgroundless, far-fetched and sheer nonsense.\u201d<\/p>\n\n\n\n Describing the hacking reports as a \u201ccollective disinformation campaign,\u201d Chinese foreign ministry spokesperson Mao Ning retorted: \u201cThe U.S. is the empire of hacking.\u201d CGTN<\/a>, Xinhua<\/a>, and Global Times<\/a> all ran articles on her remarks, which were amplified via their Twitter<\/a> accounts<\/a>, with official Chinese accounts<\/a> joining<\/a> in. China Daily followed with its own article<\/a> criticizing the U.S. On Twitter, Hu Xijin mocked<\/a> the report, and the Chinese embassy in Kenya shared a video<\/a> of a Kenyan economist criticizing the \u201cpower hegemony\u201d of the U.S.<\/p>\n\n\n\n In addition to denying the hacking allegations and accusing the U.S. of misconduct, China also sought to bolster its image among the Kenyan public. After the Reuters report emerged, Chinese state media published numerous articles emphasizing China\u2019s strong ties to Kenya. On Wednesday, China Daily published a video feature<\/a> \u201cexploring the deep roots of China and Kenya\u2019s relationship,\u201d which was shared<\/a> on Twitter and republished on the website<\/a> of the Forum on China-Africa Cooperation (FOCAC). On Friday, China Daily published a long article<\/a> titled \u201cKenya reaps real BRI dividends,\u201d later shared<\/a> to Twitter via multiple<\/a> tweets. Xinhua published an article<\/a> that day, titled \u201cKenya marks Africa Day amid growing Sino-African ties,\u201d that was also shared on the FOCAC website<\/a>. <\/p>\n\n\n\n Local Kenyan media coverage of the issue showed the ease with which Chinese state narratives gained traction during a potential public-relations crisis for China. At Capital News<\/a>, the first article<\/a> on the issue, under an anonymous byline, uncritically relayed the embassy\u2019s criticism of the report with heavy use of quotes and paraphrasing. Among the only other two articles it ran, one<\/a> under an anonymous byline uncritically relayed the Kenyan government\u2019s dismissal of the report, and the other was an op-ed<\/a> with blistering criticism of the Reuters \u201cdisinformation attempts.\u201d<\/p>\n\n\n\n At the state-run Kenya Broadcasting Company (KBC)<\/a>, only two articles touched on the issue, and neither had a byline. The first<\/a> was composed entirely of quotes and paraphrases of the Chinese embassy statement, and the second<\/a> uncritically relayed the Kenyan government\u2019s description of the report as \u201csponsored propaganda.\u201d At The Star<\/a>, while several articles were published on the subject, one of the earlier ones<\/a> was composed entirely of quotes and paraphrasing of the Chinese government\u2019s statement, and included the same image as the banner of the embassy\u2019s Twitter profile<\/a>. <\/p>\n\n\n\n At the Nation<\/a>, three articles were published on the subject. The first<\/a> and third<\/a> had bylines and described the Reuters report and the Kenyan government\u2019s dismissal, respectively. The second<\/a> had no byline and was composed entirely of quotes and paraphrases from the Chinese embassy statement. At the same time, the outlet\u2019s homepage showcased a sponsored article<\/a> by Xinhua extolling Xi Jinping\u2019s \u201cwisdom\u201d in fostering a China-Central Asian community. In March, on the other hand, the newspaper\u2019s Elvis Ondieki reported critically on Chinese and Russian Twitter broadsides against the West<\/strong><\/a> from their embassies in Nairobi:<\/p>\n\n\n\n \u201cChina never engages in slaughter, predation or racial genocide of its ethnic minorities and never allows \u2018I can\u2019t breathe\u2019 to happen,\u201d one message says, obviously referring to the killing of George Floyd \u2013 a Black man \u2013 by White police officers in the US.<\/p>\n\n\n\n [\u2026] The two powers have also been using their embassies in other African countries to attack the West. However, handles of the embassies in Kenya appear to be the most active and preferred. On February 18, the Chinese embassy in Nigeria tweeted a scathing post on Washington.<\/p>\n\n\n\n \u201cLiving up to the epithet of \u2018surveillance empire\u2019, the US has, for decades, conducted indiscriminate mass surveillance of foreign governments, companies and individuals as well as its citizens,\u201d it posted through its handle @china_emb_ng.<\/p>\n\n\n\n [\u2026] Some Kenyans are already demanding to know why this country is being pulled into the rivalry.<\/p>\n\n\n\n [\u2026] A Kenyan called Kazuri saw humour in China\u2019s attack on the US in late February: \u201cI suggest a boxing match between the Chinese ambassador and the American ambassador at the KICC to decide this matter.\u201d [Source<\/strong><\/a>]<\/p>\n<\/blockquote>\n\n\n\n Kenya\u2019s relations with China have become strained<\/a> in recent years as Nairobi grapples with a debt crisis. China provided loans worth billions of dollars to Kenya to fund major infrastructure projects, some of which are producing more debt, dysfunction, and criminal inquiries<\/a> than government revenue. The current trajectory risks forcing the country into defaulting<\/a> on its debt. Since the election of President William Ruto last year, the Kenyan government has tried to take a tougher stance towards China and pivot towards the West<\/a>, but Ruto has struggled<\/a> to deliver on his campaign promises.<\/p>\n\n\n\n In 2018, the African Union accused China of hacking into its headquarters’ computer system<\/a> every night for five years and transferring confidential files. The building, located in Ethiopia, was built by a Chinese state-owned company and funded by Beijing. In Kenya, Huawei has helped build<\/a> the country\u2019s telecommunications systems and has recently signed deals<\/a> to expand its coverage.<\/p>\n\n\n\n Meanwhile, another report of potential Chinese hacking<\/a> surfaced on Wednesday. As David Sanger described in The New York Times, a mysterious computer code linked to Chinese actors appeared in telecommunications systems in Guam and elsewhere in the U.S.<\/strong><\/a>:<\/p>\n\n\n\n The code, which Microsoft said was installed by a Chinese government hacking group, raised alarms because Guam, with its Pacific ports and vast American air base, would be a centerpiece of any American military response to an invasion or blockade of Taiwan. The operation was conducted with great stealth, sometimes flowing through home routers and other common internet-connected consumer devices, to make the intrusion harder to track.<\/p>\n\n\n\n The code is called a \u201cweb shell,\u201d in this case a malicious script that enables remote access to a server. Home routers are particularly vulnerable, especially older models that have not had updated software and protections.<\/p>\n\n\n\n\n
\n
\n