Researchers at Palo Alto Networks (PANW) reported that a group of suspected Chinese hackers breached email servers used by foreign ministries. The hackers gained access to Microsoft (MSFT) Exchange systems and searched for messages tied to diplomatic events. In one case, they searched for terms related to the 2022 China-Arab summit in Riyadh, as well as names such as Chinese President Xi Jinping and his wife, Peng Liyuan.
Elevate Your Investing Strategy:
- Take advantage of TipRanks Premium at 55% off! Unlock powerful investing tools, advanced data, and expert analyst insights to help you invest with confidence.
The company’s Unit 42 team has tracked the group, which it calls Phantom Taurus, for nearly three years. According to the researchers, the hackers also searched embassy and military messages, then pulled data from those servers. While the company did not identify which countries were affected, it said the activity fits with Chinese economic and political interests.

Broader Context in Cyber Activity
Chinese officials denied the claim, with a spokesperson from the Chinese Embassy in Washington saying the country opposes cyberattacks of any form. He added that it is hard to trace the true origin of attacks because of the nature of cyberspace.
This report follows other recent alerts about suspected Chinese groups. Alphabet Inc. (GOOGL) (GOOG) said earlier this month that a team linked to China targeted U.S. technology firms. In another case, attackers impersonated the Republican chair of the House Select Committee on China to try to steal trade data.
Palo Alto Networks noted that many Phantom Taurus incidents coincided with geopolitical events or military movements. The group also looked into regions such as Afghanistan and Pakistan.
Is Palo Alto a Good Stock to Buy?
According to the Street’s analysts, Palo Alto is a Strong Buy, with an average PANW stock price target of $217.84. This implies a 6.81% upside from the current price.
