U.S. DOJ: Prolific Chinese state-sponsored contract hacker extradited from Italy


Xu Zewei (徐泽伟), 34, of the People’s Republic of China was extradited to the United States this weekend and appeared today in U.S. District Court in Houston on a nine-count indictment related to his involvement in computer intrusions between February 2020 and June 2021.

Certain of those computer intrusions allegedly are part of the HAFNIUM computer intrusion campaign that compromised thousands of computers worldwide, including in the United States. Other intrusions targeted U.S. COVID-19 research during the height of the pandemic. Xu is charged along with Zhang Yu (张宇), 44, who is also a PRC national. According to court documents, officers of the PRC’s Ministry of State Security’s (MSS) Shanghai State Security Bureau (SSSB) directed Xu to conduct this hacking. The MSS and SSSB are PRC intelligence services responsible for PRC’s domestic counterintelligence, non-military foreign intelligence, and aspects of the PRC’s political and domestic security.

Read more…
Source:  U.S. Department of Justice


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Russia and China left out of global anti-ransomware meetings

    October 13, 2021

    The White House National Security Council facilitates virtual meetings this week with senior officials and ministers from more than 30 countries in a virtual international counter-ransomware event to rally allies in the fight against the ransomware threat. Publicly disclosed ransomware payments have reached more than $400 million globally in 2020 and over $81 million in the ...

  • Ukrainian police arrest DDoS operator controlling 100,000 bots

    October 11, 2021

    Ukrainian police have arrested a hacker who controlled a 100,000 device botnet used to perform DDoS attacks on behalf of paid customers. DDoS for hire The threat actor was arrested at his home in Prykarpattia where he was allegedly using the botnet to perform DDoS attacks or to support other malicious activity for his clients. This activity included ...

  • European Parliament passes non-binding resolution to ban facial recognition

    October 7, 2021

    The European Parliament has voted in favour to a resolution banning law enforcement from using facial recognition systems. In explaining the resolution, the European Parliament said the use of AI by law enforcement currently poses various risks spanning opaque decision-making, discrimination, privacy intrusion, challenges to the protection of personal data, human dignity, and the freedom of ...

  • Ransomware Gang Arrested In Ukraine With Europol’s Support

    October 4, 2021

    On 28 September, a coordinated strike between the French National Gendarmerie (Gendarmerie Nationale), the Ukrainian National Police (Національна поліція України) and the United States Federal Bureau of Investigation (FBI), with the coordination of Europol and INTERPOL, has led to the arrest in Ukraine of two prolific ransomware operators known for their extortionate ransom demands (between ...

  • Russia: CEO of Group-IB cybersecurity firm arrested on ‘high treason’ charges

    September 30, 2021

    The founder and CEO of Russia’s Group-IB digital security firm has been detained by authorities and charged with high treason, reportedly for passing on secret information to foreign spies in yet another cloak and dagger drama. On Wednesday, a Moscow court ordered that Ilya Sachkov can be detained in custody for two months while prosecutors prepare ...

  • Operation Ironside has confiscated AU$31 million of assets so far

    September 27, 2021

    Australian Federal Police (AFP) has so far seized over AU$31 million of assets through Operation Ironside, the message decryption sting operation that was labelled as the country’s “most significant operation in policing history”. The update was provided as part of an AFP announcement that it made its first multi-million cash forfeiture as part of the sting ...