US Charges Two for Cyber Intrusions Linked to COVID-19 Research
The Department of Justice, as part of its campaign to diminish the influence of the Chinese Communist Party in the US, has announced the arrests of two individuals, Xu Zewei and Zhang Yu. They face allegations of participating in global computer breaches tied to COVID-19 research.
Xu, 33, and 44-year-old Zhang are facing a total of nine charges. “We can hack and steal crucial COVID-19 research at the behest of the Chinese government. Meanwhile, that same government withheld vital information regarding the virus and its origins,” commented Nicholas Gandhi, a legal representative from the Southern District of Texas.
The authorities claim that the Shanghai State Security Bureau directed Xu’s activities, which focused on penetrating computer systems between February 2020 and June 2021. His targets included American universities and research institutions, seeking sensitive data on COVID-19 vaccine development, treatments, and testing procedures.
In February 2020, Xu reportedly informed his superiors that he had breached a network of research universities in the Southern Texas area. Following this, they focused on specific email accounts belonging to virologists and immunologists.
Brett Leatherman, an assistant director in the FBI’s cyber division, elaborated that Xu and his associates operated under a group later known as Hafnium. “Through Hafnium, the CCP has targeted over 60,000 US entities and committed more than 12,700 acts to steal sensitive information,” he stated.
In the latter half of 2020, Hafnium allegedly breached the Microsoft Exchange Server, impacting various systems worldwide, including firms in Southern Texas and other educational institutions. Microsoft described Hafnium in March 2021 as a “state-sponsored” group originating from China, focused on targets like infectious disease researchers and NGOs.
Xu was arrested in Milan, Italy, on July 3, acting on a request from the US government, and is now awaiting extradition. He faces charges including wire fraud, conspiracy to commit wire fraud, and unauthorized access to a protected computer, among others.
Gandhi remarked, “The Southern Texas District eagerly anticipates Xu’s trial, demonstrating that we will track down hackers and hold them accountable, no matter how long it takes. The US will not forget.” Zhang remains at large.
