China’s Cyberspace Force: Inside Beijing’s New Digital War-fighting Command

Why This Matters

Modern wars no longer begin with missiles or troops—they start with code. Power grids fail, satellites go blind, communications collapse, and public perception is quietly shaped online. In April 2024, China made this reality official by launching the People’s Liberation Army (PLA) Cyberspace Force, a dedicated military branch designed to dominate the digital battlefield.

This move signals more than bureaucratic reshuffling. It reflects Beijing’s belief that future conflicts—especially around Taiwan or the Indo-Pacific—will be decided as much in cyberspace as on land, sea, air, or space.


The Birth of the PLA Cyberspace Force

The PLA Cyberspace Force was formally established on April 19, 2024, following the dissolution of the Strategic Support Force (SSF). Alongside it, China also created the Aerospace Force and Information Support Force, marking the PLA’s most significant structural reform in nearly a decade.

The Cyberspace Force inherited the SSF’s Network Systems Department, consolidating cyber warfare, electronic warfare, and psychological operations under a single command. Chinese defense officials described its mission as strengthening “national cyber border defense” and countering foreign intrusions that threaten sovereignty.

This reorganization solved a long-standing PLA problem: fragmented cyber units spread across services and regions. Now, command authority flows directly through the Central Military Commission (CMC), improving coordination, political oversight, and operational speed.


How the Force Is Organized

At the operational level, the Cyberspace Force runs five regional Technical Reconnaissance Bases (TRBs), each aligned with a PLA theater command:

  • Eastern Theater – Unit 32046 (Nanjing)
  • Southern Theater – Unit 32053 (Guangzhou)
  • Western Theater – Unit 32058 (Chengdu)
  • Northern Theater – Unit 32065 (Shenyang)
  • Central Theater – Unit 32081 (Beijing)

These Corps Leader-grade units collect and analyze signals intelligence, cyber data, and electronic emissions relevant to their regions. By centralizing intelligence that was once scattered across naval, air force, and regional commands, the PLA gains faster and more actionable battlefield awareness.

The National Operations Hub

Above the TRBs sits the Cyberspace Operations Base (Unit 32087) in Beijing. This unit oversees:

  • Offensive cyber operations
  • Electronic warfare (Unit 32090, Qinghuangdao)
  • Psychological operations
  • Cyber and encryption R&D (Unit 32085)

Former assets from the PLA’s Third and Fourth Departments—China’s historical cyber and electronic warfare organs—were absorbed here. This enables shared tools, exploits, and intelligence across the force, creating economies of scale and increasing operational sophistication.

Supporting elements include a Logistics Department (Unit 32047), an Equipment Department with seven regional offices, Network and Information Bureaus, and the PLA Information Engineering University, which anchors research and training.


Leadership and Public Debut

The Cyberspace Force is led by Commander Zhang Minghua and Political Commissar Han Xiaodong, both appointed at its founding. Their dual leadership reflects the PLA’s emphasis on both operational effectiveness and party control.

The force made its first public appearance during the 2025 China Victory Day Parade, where it showcased command vehicles, reconnaissance platforms, and cyber-electromagnetic countermeasure systems—signaling confidence and readiness.


Core Capabilities and Missions

The Cyberspace Force’s mission set is broad and deeply integrated into joint warfare doctrine:

  • Cyber reconnaissance and espionage
  • Offensive cyber intrusions
  • Electronic warfare and jamming
  • Psychological and information operations
  • Encryption, vulnerability research, and tool development

Regional TRBs focus on battlespace preparation, mapping enemy networks and communications. Meanwhile, the Operations Base executes national-level cyber attacks, electronic suppression, and even counterspace activities, such as tracking satellites.

Unit 32090 has reportedly expanded non-kinetic assets, including 30-meter antenna arrays capable of space sensing—directly targeting U.S. and allied C4ISR (Command, Control, Communications, Computers, Intelligence, Surveillance, and Reconnaissance) systems.

Importantly, PLA cyber operations have evolved. Rather than noisy “smash-and-grab” hacks, the force now emphasizes disciplined, long-term access, infrastructure prepositioning, and strategic disruption—aligned with PLA doctrine that cyber operations open conflicts before kinetic action begins.

PLA Cyberspace Force cyber warfare command visualization

Real-World Cyber Operations

Units now believed to operate under Cyberspace Force oversight—such as former PLA Unit 61486—have been linked to sophisticated spear-phishing campaigns targeting satellite firms, defense contractors, and government agencies across the U.S., Europe, Japan, and Southeast Asia.

Notable incidents include:

  • 2024 breach of UK Ministry of Defense payroll systems via third-party contractors
  • Cyber intrusions into Japan’s space agency
  • Network breaches in the Philippines
  • Terabyte-scale data theft from over 150 organizations, attributed by Mandiant to PLA-linked groups

These operations are not random. They are designed to gather intelligence, disrupt adversaries, and shape the digital battlefield long before any visible conflict erupts.


Strategic Implications for Global Security

The creation of the Cyberspace Force strengthens CMC control while reducing service-specific intelligence silos, reinforcing China’s joint warfare ambitions. It also serves as a warning: cyber warfare is no longer auxiliary—it is foundational.

Analysts increasingly view the force as a bellwether for conflict, particularly regarding Taiwan and the Indo-Pacific. In such scenarios, cyber and electronic attacks would likely precede missiles or troop movements.

Challenges remain. Integrating cyber, electronic, space, and kinetic operations requires advanced training and real-world testing. But the direction is clear: China is preparing for “system destruction warfare,” where disabling an enemy’s digital nervous system is as decisive as battlefield victories.


Conclusion

The PLA Cyberspace Force represents China’s most explicit acknowledgment that future wars will be won—or lost—in invisible domains. By centralizing cyber, electronic, and psychological warfare under one command, Beijing has positioned itself for high-intensity, multi-domain conflict in the digital age.

As global tensions rise, understanding this force is no longer optional. It is essential to grasping how modern warfare will unfold.


References

Costello, J. (2025). Cyberspace Force. The Jamestown Foundation.
https://jamestown.substack.com/p/cyberspace-force

PLA’s Multi-Domain Reorganization. AlphaHunt Blog (2025).

People’s Liberation Army Cyberspace Force. Wikipedia.
https://en.wikipedia.org/wiki/People%27s_Liberation_Army_Cyberspace_Force

Cyberspace Force Equipment at the 2025 Military Parade. Jamestown Foundation (2025).
https://jamestown.org/cyberspace-force-equipment-at-the-2025-military-parade/

The Cyberspace Force: A Bellwether for Conflict. Jamestown Foundation (2025).
https://jamestown.org/the-cyberspace-force-a-bellwether-for-conflict/

Significant Cyber Incidents. CSIS (ongoing).
https://www.csis.org/programs/strategic-technologies-program/significant-cyber-incidents

PLA Unit 61486. Wikipedia.
https://en.wikipedia.org/wiki/PLA_Unit_61486

The PLA’s Cyber Operations Go Dark. Lawfare (2024).
https://www.lawfaremedia.org/article/the-plas-cyber-operations-go-dark

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top