In a major announcement on Wednesday, the U.S. Justice Department unveiled indictments against 12 Chinese nationals for their involvement in a global hacking campaign. The indictments reveal that China’s Ministry of Public Security (MPS) and Ministry of State Security (MSS) have been using a network of private companies and hackers-for-hire to target U.S.-based dissidents, news organizations, government agencies, and a large religious organization.
According to court documents, the Chinese government paid hackers-for-hire to steal information and help locate dissidents and critics throughout the world. This revelation has raised concerns about the Chinese Communist Party’s (CCP) efforts to suppress free speech and democratic processes worldwide. The Assistant Director of the FBI’s Cyber Division, Bryan Vorndran, stated, “Today’s announcements reveal that the Chinese Ministry of Public Security has been paying hackers-for-hire to inflict digital harm on Americans who criticize the CCP.”
The suspects include two officers from China’s Ministry of Public Security, eight employees of a company known as i-Soon, and two members of a group known as Advanced Persistent Threat 27 (APT27). The Justice Department is offering a reward of up to $10 million for information leading to the arrest of the MPS officers and i-Soon, the Chinese company that employed most of the hackers.
The indictment accuses i-Soon of selling stolen information to China’s intelligence and security services in order to suppress free speech and democratic processes worldwide. The company also provided training in hacking skills to government agencies. It is alleged that the company charged the MSS and MPS between $10,000 and $75,000 for each successful email inbox hack. The company also conducted computer intrusions on its own initiative.
The targets of this hacking campaign were not limited to the United States. The indictment reveals that foreign targets included a religious leader, a Hong Kong newspaper, and the foreign ministries of Taiwan, India, South Korea, and Indonesia. This highlights the global reach of China’s efforts to suppress dissent and manipulate public opinion.
Among the U.S.-based targets were a large religious organization critical of the Chinese government and a group promoting human rights and religious freedom in China. The New York Assembly and multiple news organizations were also targeted, including those that have openly opposed the CCP or delivered uncensored news to China.
In a separate indictment, two men connected to APT27, Zhou Shuai and Yin Kecheng, were charged for their involvement in a multi-year, for-profit computer intrusion campaign. The two face several charges, including computer network conspiracy, wire fraud, aggravated identity theft, and money laundering.
The State Department has announced a reward of up to $2 million for information leading to the arrest of Zhou and Yin. They are accused of hacking numerous U.S.-based technology companies, think tanks, law firms, defense contractors, local governments, health care systems, and universities, causing millions of dollars in damages.
State Department spokesperson Tammy Bruce stated, “As evidenced by today’s and previous announcements, China offers safe harbor for private sector companies that conduct malicious cyber activity against the United States and its partners.” This highlights the need for strong action against China’s state-sponsored hacking activities.
The indictments were the result of a joint investigation by the Justice Department, FBI, Naval Criminal Investigative Service, and the Departments of State and the Treasury. This shows the strong commitment of the U.S. government to combat cyber threats and protect its citizens and partners.
In response to the allegations, a spokesperson for the Chinese Embassy in Washington, Liu Pengyu, dismissed them as a “smear” and urged relevant parties to base their characterizations on sufficient evidence rather than “groundless speculation and accusations.”
The U.S. takes cyber threats very seriously and will not tolerate such malicious activities. These indictments serve as a strong message to China and other countries that engage in similar state-sponsored hacking campaigns. The international community must unite to counter such threats and protect the free flow of information and democratic processes.
In conclusion, the U.S. Justice Department’s indictment against 12 Chinese nationals for their involvement in a global hacking campaign is a significant step in holding China accountable for its actions. It also serves as a reminder to the world that the U.S. will not tolerate cyber threats and will take all necessary measures to safeguard its citizens and partners. Let us hope that these indictments will pave the way for a more secure and peaceful cyber environment in the future.
