Safeguarding Digital Innovation

About Tencent

Tencent is one of the world’s largest technology companies, excelling in social media, gaming, cloud computing, and AI. With platforms like WeChat and QQ, Tencent has transformed global communication and entertainment.

Social Media

WeChat and QQ connect over a billion users globally.

Gaming

Global hits like Honor of Kings and PUBG Mobile lead the gaming revolution.

Cloud & AI

Enterprise solutions powered by Tencent’s cloud and AI technologies.

Understanding Cyberthreats

Advanced Persistent Threats (APTs) are stealthy and sophisticated attacks targeting Tencent’s systems, users, and businesses.

Reconnaissance

Attackers gather information about Tencent’s systems and personnel.

Exploitation

Exploiting software vulnerabilities such as zero-day exploits.

Persistence

Establishing backdoors to maintain long-term access.

Exfiltration

Stealing sensitive data like user credentials and proprietary algorithms.

Cyberthreat Targets - The Victims

The primary victims of APTs targeting Tencent include:

Cyberthreat Activities

APTs target Tencent through various sophisticated methods:

Phishing Attacks

Deceiving employees and users to obtain sensitive information.

Malware Deployment

Custom malware used to infiltrate and monitor systems.

Supply Chain Attacks

Exploiting vulnerabilities in third-party software or hardware.

Cyberthreat Detection and Prevention Solutions

• Enhanced Threat Detection Systems: Utilize AI-driven monitoring tools to detect anomalies and suspicious activities in real time.
• Regular Security Audits: Conduct thorough vulnerability assessments and penetration tests.
• Zero Trust Security Model: Implement a zero-trust framework that verifies all access requests, even from within the organization.

What to Do and Not Do

Cyberthreat Impacts

Cybersecurity Awareness

Tencent's cybersecurity awareness initiatives focus on proactive measures to counter cyberthreats by educating employees, engaging users, and fostering collaboration with experts.

Employee Training

Tencent conducts regular workshops, simulations, and drills to prepare employees for cyberthreat scenarios. Employees are trained to:

• Identify phishing emails and suspicious attachments.
• Respond quickly to potential breaches with clear protocols.
• Use secure systems, update passwords, and enable two-factor authentication.

Example: In 2023, a phishing simulation exercise led to a 30% improvement in identifying fake emails across departments. Employees successfully reported 87% of simulated phishing attempts.

User Campaigns

Tencent educates its platform users, particularly WeChat and QQ users, about best practices to stay safe online. These campaigns aim to:

• Promote enabling two-factor authentication for accounts.
• Highlight dangers of clicking on suspicious links.
• Encourage regular password updates and secure sharing practices.

Example: The "Stay Safe Online 2022" campaign reached over 10 million users, providing infographics, step-by-step tutorials, and video guides to secure accounts. Feedback showed a 50% increase in users activating two-factor authentication on QQ.

Collaborative Initiatives

Tencent partners with global cybersecurity firms, academic institutions, and government agencies to share knowledge and strengthen defenses. Key activities include:

• Joint workshops on advanced persistent threats (APTs).
• Collaborative research into AI-driven threat detection models.
• Developing cybersecurity awareness modules for schools and universities.

Example: In 2021, Tencent collaborated with SANS Institute to host a "Cyber Defense for Enterprises" workshop, attended by over 2,000 IT professionals worldwide. The workshop covered real-world case studies on ransomware mitigation.