1 October 2026

The Full Stack of U.S.-China Cyber Competition

Lawfare | Benjamin Ang

Full Stack Spies examines U.S.-China cyber competition across tradecraft, statecraft, and instability, utilizing an upstairs-downstairs framework that connects leadership decisions to operational execution. The book analyzes how Chinese state institutions like the Ministry of State Security and the People’s Liberation Army direct hacker groups embedded within commercial ecosystems.

It details the shift from intellectual property theft toward pre-positioning for disruption, specifically examining campaigns such as Salt Typhoon and Volt Typhoon. Strategic deterrence remains constrained by uncoordinated allied naming and shaming strategies that fail to alter Beijing's calculus. The analysis introduces volatile trust and not war as conceptual lenses to evaluate sub-threshold competition, though certain historical claims and attributions require closer scrutiny. Ultimately, the volume provides a structural foundation for bridging the gap between technical cyber mechanics and grand strategy.

Comment

The operational overlap between commercial contractors and provincial bureaus within the Chinese cyber ecosystem complicates conventional deterrence models built on direct state attribution. When groups linked to the Ministry of State Security or the People's Liberation Army leverage shared commercial tooling, attribution frameworks struggle to separate state command structures from decentralized labor markets. This structural ambiguity allows state actors to maintain plausible deniability while pre-positioning malicious code inside critical infrastructure networks.

Strategic Question for Discussion
How does the reliance on commercial contractors within campaigns like Volt Typhoon alter the operational efficacy of public naming-and-shaming attribution strategies?
The available evidence indicates that commercial integration diffuses reputational costs across proxy entities rather than directly punishing commanding state organs. This structural insulation suggests that traditional deterrence mechanisms will continue to produce limited behavioral modification from Beijing.
Share your assessment in the comments below.