This is your Cyber Sentinel: Beijing Watch podcast.

Ting here—thanks for connecting for another episode of Cyber Sentinel: Beijing Watch, where the cyber news never sleeps and neither do the hackers. Let’s zap the pleasantries and get straight to this week’s pulse-pounding update.

The cyber skies have been stormy: Just yesterday, Google dropped a lawsuit like a digital anvil on a China-based criminal network called Lighthouse. Their MO? Mass-texting Americans about everything from “your package is stuck” to “unpaid toll,” driving victims to fake sites cloaked in Google branding. Once folks typed in their info, out went passwords and credit card numbers, in walked the bad guys—over a million victims so far, potentially up to 100 million cards sniffed out. Google’s Halimah DeLaine Prado called this a first-of-its-kind RICO Act action, which usually goes after mafia types, but hey—cyber is the new organized crime.

The tactical takeaway? Phishing is more sophisticated: attackers are using lookalike domains, AI-generated web content, and language tricks tailored to U.S. audiences. No longer are scams full of broken English or sketchy graphics—these are slick, credible, and relentless.

Industries on high alert: financial services, e-commerce, and defense. Last year, “Salt Typhoon,” another Chinse entity, even targeted the communications of President Donald Trump and Vice President JD Vance during the election season, highlighting a strategic pivot towards disruption of U.S. civic infrastructure. The environmental sector hasn’t escaped: recent EPA updates reveal Chinese actors probing water systems for vulnerabilities. No sector is too small or dull.

Now, attribution is always the trickiest game in cyber, but this week brought juicy breadcrumbs: as reported by CBS News and the Washington Examiner, Google’s evidence ties Lighthouse to Chinese mainland servers, and analysis shows infrastructure overlap with previously documented Beijing-backed entities. Last week, the world got a peek inside Knownsec—a major Chinese cybersecurity firm—when a breach leaked more than 12,000 internal files, many tying back to state-run cyber offensives targeting Western governments and industries.

This all triggered an international flurry: Bloomberg and The Record confirm that the U.S. Justice Department, FBI, and Secret Service launched the Scam Center Strike Force—a multi-agency bulldozer aimed squarely at Southeast Asian scam operations with strong Chinese and Burmese links. Measures include new sanctions from the Treasury on associated companies and a major crackdown on so-called pig butchering scams, techniques that con victims into investing in fake crypto platforms. Chainalysis reports Americans lost at least $10 billion to these scams in a single year—yes, billion with a B.

If you’re asking: what should you—business leaders, CISOs, cybersecurity teams—do? Screen every transaction for sanctioned entities and high-risk jurisdictions. Ramp up employee awareness

This content was created in partnership and with the help of Artificial Intelligence AI.