Security researchers believe computers at Chinese educational institutions were involved in the recent cyber attacks on Google and other US companies.
The attacks may have started as early as April 2008, unnamed sources involved in the investigation told The New York Times.
When Google revealed in January that its systems had been attacked, it put the start of the events no earlier than December.
Shanghai Jiaotong University and Lanxiang Vocational School are the two institutions said to be involved in the attacks, the New York Times said, citing several unnamed persons with knowledge of the investigation.
Investigators had previously tracked the attacks back to servers in Taiwan.
However, hackers often disguise their identity by sending commands through a number of computers on their way to a target.
Even if further investigation backs up the findings cited in the latest news reports, that may not point to Chinese involvement in the attacks, as the real trail could go back further still.
Investigators are still pursuing a number of theories, according to a report from the Wall Street Journal.
Google announced on January 12 that attackers had tried to break into the Gmail accounts of Chinese human rights activists.
In investigating the attacks, it said, it found other US companies in the internet, finance, technology, media and chemical sectors had also been attacked.