12 Chinese Nationals Charged in Alleged Cybercrime Campaign

The U.S. Justice Department has charged multiple Chinese nationals in connection to an elaborate cyberespionage network allegedly targeting prominent figures and institutions.

Quick Takes

Twelve Chinese nationals, including hackers and law enforcement officers, are charged with cybercrime campaigns.
The “hacker-for-hire ecosystem” in China allegedly shields state security forces.
The U.S. issued indictments across several districts for cyber activities against government and private entities.
The Chinese government denies the charges, accusing the U.S. of cyber aggression.

U.S. Charges Twelve Chinese Nationals

The U.S. Justice Department has charged twelve Chinese nationals related to global cyberespionage activities. Accused are alleged mercenary hackers and law enforcement officers, some involved with China’s Ministry of Public Security and Ministry of State Security. These individuals are accused of conducting cyberattacks on dissidents, news organizations, U.S. agencies, and universities worldwide. The U.S. aims to dismantle this network of cyber mercenaries it alleges is threatening national security.

The Chinese Academy for Science-run hacking company I-Soon reportedly played a crucial role in these activities. Founded by Wu Haibo in 2010, the company allegedly engaged in hacking campaigns targeting governments such as India, Taiwan, and Mongolia. The allegations state they had also been involved in suppressing speech and stealing data from dissidents and media outlets in the U.S., reportedly selling the information to Chinese authorities.

Twelve Chinese nationals, including mercenary hackers, law enforcement officers and employees of a private hacking company, have been charged in connection with global cyberespionage campaigns targeting dissidents, news organizations, U.S. agencies and … https://t.co/dCm7PNAZ7T

— KSTP (@KSTP) March 5, 2025

Sophisticated Cyber Threats and U.S. Response

The U.S. government has issued warnings about sophisticated cyber threats, including a particularly severe hack known as Salt Typhoon, which reportedly accessed private American communications. As part of the crackdown, the U.S. Department of State is offering rewards for information on the charged defendants. The charged individuals purportedly remain at large, and the U.S. seeks international collaboration to apprehend them.

In response, the Chinese foreign ministry denied the charges, accusing the U.S. of being hypocritical and engaging in cyberattacks against China. A spokesperson for the Chinese Embassy in Washington dismissed the allegations as a “smear,” urging evidence-based characterizations of cyber incidents.

Implications and Future Steps

This revelation underscores a complex landscape of hacking-for-hire operations in China, where private contractors are paid by the government to breach systems external to China. It challenges international cybersecurity efforts and highlights the need for robust defenses. Microsoft and other partners assist in raising awareness and strengthening protective measures against ongoing threats.

The Justice Department remains committed to preventing cybersecurity threats, working alongside organizations like the FBI to detect and deter these attacks. The complex network of cyber mercenaries operating under quasi-entrepreneurial models reveals a need to focus efforts on protection and prevention to safeguard the nation from foreign cyberattacks.