Chinese hackers 'infiltrate' BiH institutions: Experts issue alarming warning about strategic espionage

(Patria) - Bosnia and Herzegovina has been targeted by the sophisticated Chinese hacking group UNC2814, known as "Gallium", which carries serious security and political implications. Assistant Professor Nerma Halilović-Kibrić warns that these attacks are not accidental, but indicate a deep strategic interest in the data and communications within our state institutions.

Invisible Surveillance and Personal Data Theft

Unlike ordinary hackers who seek money, the China-linked group uses long-term and covert presence campaigns (APT). Google has confirmed that these hackers have installed a "backdoor" in some systems, through which they had access to citizens' names, phone numbers, and even personal identification numbers. The goal is years of monitoring digital systems and analyzing how key state institutions function.

The situation is further complicated by the fact that Bosnia and Herzegovina is the only country in Europe without a functional national CERT team (Computer Emergency Response Team). Due to the complex political structure and lack of consensus, the country lacks a central point of defense, so each institution reacts individually, making the attackers' job easier.

Experts emphasize that the digital space is becoming the main field of espionage, as important as classic methods. Without the urgent adoption of a cybersecurity strategy and laws on critical infrastructure protection, BiH remains vulnerable to attacks that could lead to disruptions in power grids, the financial sector, and telecommunications.