The Chinese Embassy in the United States has firmly denied any connection to recent cyberattacks targeting Microsoft’s SharePoint servers. On Wednesday, embassy spokesperson Liu Pengyu addressed the allegations, emphasizing that China opposes all forms of cyberattacks and cybercrime.
“Cyberattacks are a common threat faced by all countries, and China is also a victim of such threats,” Liu stated. “We firmly oppose smearing others without solid evidence.”
Earlier this week, Microsoft reported that it had observed two groups, identified as “Linen Typhoon” and “Violet Typhoon,” which it described as “Chinese nation-state actors,” exploiting vulnerabilities in its SharePoint servers. The company also noted that a third group based in China had leveraged the same security flaws.
Microsoft’s SharePoint servers are widely used by organizations worldwide for document sharing and internal collaboration. On Saturday, the tech giant warned users of a “zero-day” vulnerability—an unpatched software flaw—that was actively being exploited.
However, Microsoft clarified that the attacks only affect on-premises SharePoint servers and do not impact its online services. The company has since released comprehensive security updates to address the vulnerabilities across all supported versions of SharePoint Server, including Subscription Edition, 2019, and 2016.
Liu Pengyu underscored China’s commitment to combating cyber threats, calling for international cooperation to ensure cybersecurity. “China’s stance is consistent and clear. We stand against all forms of cyberattacks and cybercrime,” he said.
