Leaked technical documents show China rehearsing cyberattacks on neighbors’ critical infrastructure

Recorded Future reviewed a leaked cache of technical documents and source code for "Expedition Cloud," a Chinese-developed cyber range that replicates adversary critical-infrastructure networks (power, energy transmission, transportation, smart homes) so reconnaissance and attack teams can rehearse operations; the leak—exposed on an unsecured FTP—contains developer files and malware and experts judge the materials authentic and indicative of state-sponsored offensive planning and increasing automation/AI use.