
So let's see a bit of the institution behind uh this ecosystem. Uh so um first you have the people liberation army which was historically the main actor. So they started to recruit hackers in 2003 and uh they were the one behind uh cyber operation at first information and psychological operation as well. But this changed um after the reorganization of the people liberation army which happened in 2015 2016. So this reorganization was due to corruption cases and uh also uh the identification of um of some of uh its uh the PLA cyber units. So then around that time the state switched switched uh preference uh for the ministry of uh state security. uh we which has um a more hybrid um
uh working process mixing in-house capabilities and also a lot of outsour outsourcing. Um they are actually uh divided in a lot of provincial departments who outsource to uh companies uh with also a sort of um division of task in terms of province. So each province has its own specialty and uh they all source two companies usually located in their own province who them those companies themselves develop uh specialization um aligned with the the state requirements. ments.