On September 30, MI5 published a formal warning naming the China General Technology Research Institute, CGTRI, also called CAGT in some translations, as an outfit with very strong ties to China’s Ministry of State Security.
The core claim is blunt. MI5 says CGTRI exists mainly to “fund academic research that directly improves MSS technical capability for espionage.” That’s not vague suspicion, that’s the agency’s stated assessment of the institute’s whole reason for existing.
“More than 100 UK-linked academics have contributed to research projects funded by MSS via CGTRI. In some cases, academics may not be aware that CGTRI is funding the Chinese research project they are contributing to.” reads the alert. “The alert advises UK academic institutions to immediately review any ongoing or planned collaboration with CGTRI and advises academics to establish the ultimate funding source when conducting any research collaboration with Chinese institutions to ensure CGTRI are not involved.”
More than 100 UK linked academics have contributed to projects funded by MSS through CGTRI, according to the alert. Here’s the part that should worry anyone in a research office: some of these academics likely had no idea CGTRI was the money behind the project they were working on. The funding chain was obscured enough that good faith participation was entirely possible.
The subject areas read like a wishlist for an intelligence service. Artificial intelligence, cybersecurity, covert communications systems, and steganography, the practice of hiding data inside other data. None of these are academic curiosities to MSS, they’re capability building blocks.
The alert tells UK universities to review any current or planned work with CGTRI immediately. Academics are also advised to check where funding for China-related projects ultimately comes from and make sure CGTRI is not involved further up the chain. MI5 points universities to government guidance from the Research Collaboration Advice Team and the National Protective Security Authority, and recommends seeking independent legal advice.
MI5 is flagging that continuing to work with CGTRI after this alert could expose people to real legal risk under the National Security Act 2023, specifically sections on assisting a foreign intelligence service and obtaining material benefit from one. Ignorance was a defense before September 30. It’s a much weaker one now that the connection is public.
Under Section 3 of the Act, a person can commit an offence if their actions are likely to materially help a foreign intelligence service, and they know or should reasonably know this. MI5’s wording is important because it does not require someone to know for certain that they are helping an intelligence service. The alert itself raises what people can reasonably be expected to know.
Anyone who continues to work on CGTRI-funded projects after the alert is published is advised to get independent legal advice on Sections 3 and 17. In practice, the government is warning people to understand the legal risks before continuing this work.
China rejected MI5’s allegations as fabricated and baseless, saying cooperation between UK universities and Chinese institutions is voluntary, lawful and mutually beneficial. Beijing said it had lodged a formal protest with the UK and urged British authorities to stop undermining academic and research cooperation.
“The accusations made by the UK intelligence agency against the relevant Chinese entity are imaginary and purely fabricated. We firmly oppose such baseless allegations and have lodged solemn representations with the UK side. Exchanges and collaboration between UK universities and China have always been conducted on a voluntary basis and in compliance with laws and regulations. Such exchanges and collaboration are mutually beneficial.” a Chinese embassy spokesperson said states. “We urge the UK intelligence authorities to stop spreading falsehoods and stop undermining educational exchanges and research cooperation between China and the UK.”
That denial contrasts with earlier research on CGTRI. The UK China Transparency think tank found that CGTRI shares staff with China’s University of International Relations, which is widely linked to the MSS. It also said CGTRI’s work overlaps with cyber capabilities that the MSS has previously used against UK companies, universities and critical infrastructure.
The issue goes beyond CGTRI itself. The bigger concern is whether sensitive research can be financed through layers of academic partnerships, making it difficult for researchers to see who is ultimately behind the funding. For university ethics boards and international partnership teams, the MI5 alert should prompt an immediate review of funding sources and research links rather than something to consider months from now.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, MI5)