U.S. DOJ: Prolific Chinese state-sponsored contract hacker extradited from Italy


Xu Zewei (徐泽伟), 34, of the People’s Republic of China was extradited to the United States this weekend and appeared today in U.S. District Court in Houston on a nine-count indictment related to his involvement in computer intrusions between February 2020 and June 2021.

Certain of those computer intrusions allegedly are part of the HAFNIUM computer intrusion campaign that compromised thousands of computers worldwide, including in the United States. Other intrusions targeted U.S. COVID-19 research during the height of the pandemic. Xu is charged along with Zhang Yu (张宇), 44, who is also a PRC national. According to court documents, officers of the PRC’s Ministry of State Security’s (MSS) Shanghai State Security Bureau (SSSB) directed Xu to conduct this hacking. The MSS and SSSB are PRC intelligence services responsible for PRC’s domestic counterintelligence, non-military foreign intelligence, and aspects of the PRC’s political and domestic security.

Read more…
Source:  U.S. Department of Justice


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Slingshot Malware ‘Was US Special Operations Spy Tool’

    March 22, 2018

    Malware discovered by Kaspersky Lab was developed by an elite group within the US military to spy on militants, officials say A highly advanced malware strain uncovered by Kaspersky Lab earlier this month was in fact developed by an elite US military unit, which was using it to track down militants associated with Islamic State and ...

  • GrayKey Device ‘Can Unlock Latest iPhones’

    March 21, 2018

    Researchers argue the stand-alone device, aimed at US law enforcement, could present a security risk if it ends up in the wrong hands A device produced by a small, secretive US company called Grayshift may be capable of unlocking the latest iPhones and the most recent versions of Apple’s iOS software, according researchers. Apple has gone to ...

  • UK police spend over £1m on cybersecurity training

    March 20, 2018

    The UK’s police forces have spent more than £1.3 million in the last three years training its staff on cybersecurity issues. The figures, contained in a new report released by the Parliament Street Think Tank, show that almost 40,000 staff have taken part in the training. North Wales Police lead the way when it came to the amount ...

  • Phone-Cracking Firm Found a Way to Unlock Any iPhone Model

    February 26, 2018

    Remember the infamous encryption fight between Apple and the FBI for unlocking an iPhone belonging to a terrorist behind the San Bernardino mass shooting that took place two years ago? After Apple refused to help the feds access data on the locked iPhone, the FBI eventually paid over a million dollar to a third-party company for unlocking the ...

  • FBI Warns of Spike in W-2 Phishing Campaigns

    February 23, 2018

    The Federal Bureau of Investigation is warning businesses about a spike in phishing campaigns requesting W-2 information from payroll personnel. In a recent security advisory the FBI warned it has seen an increase since January in reports of compromised or spoofed emails involving W-2 forms. These emails, coming during the IRS’s tax filing season, can put staffers’ social ...

  • FBI chief rekindles debate over unbreakable encryption

    January 9, 2018

    The cat and mouse game of security versus privacy continues as FBI Director Christopher Wray calls out unbreakable encryption as an “urgent public safety issue.” Throughout the past year, the FBI took possession of thousands of electronic devices. Approximately 7,800 devices were deemed impenetrable due to modern encryption techniques. Even though the FBI had the legal right to ...