Samoa: Leadership prioritises sovereignty over Chinese ties, highlights public trust issues

On 11 February, Samoa’s National Computer Emergency Response Team (SamCERT) issued a cyber threat advisory regarding the Advanced Persistent Threat 40 (APT40) cyber group. SamCERT blamed the hacking group for a series of cyber attacks against government and key critical infrastructure systems across the Pacific. SamCERT outlined the APT40’s TTPs and provided cybersecurity guidelines amid warnings of a heightened regional threat of cyberattacks. Several Pacific nations including New Zealand, Papua New Guinea, Palau, and the Pacific Islands Forum Secretariat experienced cyber attacks suspected to have been perpetuated by the APT40 in 2024. APT40 has been identified as a Chinese government-linked group which has also targeted Australia and the US in the past. In late January, Papua New Guinea’s Internal Revenue Commission was also targeted in a major cyberattack.

Assessment: It is unlikely that the report released by SamCERT is intended as a political message to challenge Chinese regional influence. However, it does show that current Samoan leadership is prepared to prioritise certain issues over its Chinese relationship, such as sovereignty and public trust in state services and infrastructure. The types of cyberattacks carried out by APT40 collect intelligence on people and infrastructure, including uncovering vulnerabilities that could be used for future industrial sabotage.

Sources: Stephen Dziedzic, “China-backed APT40 hacking group blamed for cyber attacks on Samoa,” ABC Pacific, February 12, 2025; “Cyber Threat Advisory,” SamCERT, February 11, 2025; Marian Faa, “Papua New Guinea's Internal Revenue Commission hit in major cyber attack but public only told of 'system outage’,” ABC Pacific, February 12, 2025.