China’s Ministry of State Security (MSS), the country’s top intelligence agency, issued a stark warning on Thursday regarding the hidden risks posed by smart devices, which have become deeply integrated into everyday life, work, and education. While these devices offer numerous conveniences, the MSS cautioned that if not properly managed, they could pose significant threats to national security.
The warning follows a report published on March 25 by the China Cybersecurity Industry Alliance (CCIA), which details large-scale cyberattacks and long-term surveillance operations carried out by U.S. intelligence agencies targeting mobile smart devices worldwide. According to the MSS, the report highlights the vulnerabilities of smart devices, which have become key targets in state-level cyber warfare. The agency noted that the security defenses of these devices now face unprecedented challenges on a “hidden battlefield,” where cyberattacks can occur undetected.
The MSS article outlines several ways in which smart devices can be exploited to steal sensitive data. A prime example is the use of SIM cards, which store critical identity credentials and encryption keys. Previous attacks have shown how hackers could exploit unpatched vulnerabilities by sending specially crafted messages to remotely activate a SIM card’s built-in browser. This would allow attackers to track users’ locations, steal text messages, or even initiate phone calls—without ever physically accessing the device. The report claims such attacks have left over one billion phones at risk globally.
The MSS also highlighted cases where companies in certain countries deliberately provided backdoors to intelligence agencies, allowing them to install spyware silently. Thousands of phones, including those of foreign government personnel, have been identified as infected. Vulnerabilities in mobile operating systems’ messaging services have also been exploited, enabling attackers to take full control of a device without any user interaction.
The article also addressed concerns about pre-installed apps that could serve as covert data extraction tools. For instance, certain telecom providers embedded diagnostic software in smartphones, which secretly collected sensitive data such as messages and call logs. Additionally, the 2015 revelation of the U.S.-led “Irritant Horn” program exposed how intelligence agencies from the Five Eyes alliance hijacked popular app store download links, replacing legitimate apps with spyware-laden versions, compromising the data of millions of users.
In response to these growing threats, the MSS emphasized the need for a comprehensive, multilayered security system that can safeguard every level of the ecosystem—from hardware and operating systems to data and application environments. This approach would effectively prevent and mitigate data leakage risks from smart terminals.
The Ministry also stressed the importance of heightened public cybersecurity awareness, particularly for individuals in sensitive positions. It encouraged users to avoid unverified devices and apps, be cautious of suspicious links, and adhere to good digital hygiene practices.
The growing concerns raised by China’s top spy agency underscore the increasingly complex nature of cybersecurity and the role that smart devices now play in global intelligence operations.
