logo

PAPERWALL: Chinese Websites Posing as Local News Outlets Target Global Audiences with Pro-Beijing Content

ID: 0ae72e93-406a-5dea-a754-08815fab27e2

STIX ID: report--0ae72e93-406a-5dea-a754-08815fab27e2

Feed Name: The Citizen Lab

Threat Score
50/100

Date Published: 2024-02-07

Date Updated: 2026-04-19

Author: Mari Zhou

...
...

This report exposes PAPERWALL, a large network of anonymous websites (123 domains targeting audiences in ~30 countries) that pose as local news outlets to publish scraped local news, commercial press releases (notably cryptocurrency-related), and occasional pro-Beijing political content; it links the operation to Chinese PR firm Haimai via shared Google AdSense IDs and DNS/infrastructure overlaps, highlights reliance on Times Newswire as a content source and ephemeral deletion of political posts to evade detection, and concludes the campaign currently has negligible measured impact but represents a meaningful risk of inadvertent amplification and targeted reputational harm.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.