avatar image
Advertisement

US says China operating ‘hacker for hire’ network available for cyberattacks worldwide

Justice Department charges 12 Chinese contract hackers and law enforcement officials in global computer intrusion campaigns

Reading Time:5 minutes
Why you can trust SCMP
27
China has been accused of offering up mercenary hackers for those willing to pay. Photo: Shutterstock
Khushboo Razdanin Washington,Igor PatrickandBochen Hanin Washington

Beijing was orchestrating a “hacker for hire” ecosystem – involving contract hackers, Chinese tech company employees and government officials – to carry out cyberattacks aimed at stealing data from organisations and governments worldwide, according to a senior US Justice Department official.

In a major effort to combat these cyber activities, the US Department of Justice announced the indictment on Wednesday of 12 Chinese nationals, including two officials from China’s Ministry of Public Security, employees from the private Chinese firm Anxun Information Technology Co Ltd – also known as i-Soon – and members of APT27, an alleged Beijing-backed hacking group.

The individuals face federal charges in New York and Washington.

Senior national security officials said the network had targeted several entities, including the US Treasury Department, which endured a significant breach in 2024.
The FBI says the target domain names and US Treasury Department intrusion have been tied to Yin KeCheng, a Chinese national. Photo: US Federal Bureau of Investigation
The FBI says the target domain names and US Treasury Department intrusion have been tied to Yin KeCheng, a Chinese national. Photo: US Federal Bureau of Investigation

“The indictments and other court documents allege that Chinese law enforcement and intelligence services exploit China’s reckless and indiscriminate hacker-for-hire ecosystem to suppress free speech and steal data from numerous organisations around the world, including the Treasury Department,” the official said in a background call with reporters.

The 2024 Treasury hack was not included in the indictments unsealed on Wednesday.

Khushboo Razdan is a senior correspondent based in Washington. Prior to this, she worked for the Post in New York. Before joining the team, she worked as a multimedia journalist in Beijing and New Delhi for over a decade. She is a graduate of the Columbia Journalism School.
Igor Patrick has worked in different media outlets in Latin America, mainly covering Brics and China. In addition to his bachelor's degree in journalism (PUC Minas), he holds two master's degrees from the Yenching Academy (Peking University) and Schwarzman Scholars (Tsinghua University). Before joining the Post, he was a fellow at the Wilson Center, where he wrote the book "Hearts & Minds, Votes & Contracts: China's State Media in Latin America".
Bochen joined the Post as a Washington-based correspondent in 2022 after several years working in the US, China, Myanmar and Thailand. She holds degrees from Duke University and the Johns Hopkins School of Advanced International Studies.
Advertisement