Alleged Chinese Hacker Who Stole COVID-19 Research Nabbed in Italy

The United States has successfully apprehended a suspected Chinese state-sponsored hacker who stole confidential data, including COVID-19 vaccine research, in a rare case of the US taking action against a Chinese cyber threat.

Zewei Xu, 33, a member of the notorious Chinese hacking outfit Hafnium (also known as Silk Typhoon), was arrested by law enforcement in Italy after arriving at Milan airport. According to Italian news agency ANSA, Xu was traveling on a flight from Shanghai when he was notified by the US embassy that he would be subject to arrest.

The FBI has confirmed its involvement in the arrest, stating that Xu is "one of the first hackers linked to Chinese intelligence services to be captured by the FBI." The agency's Houston office tweeted: "He is one of the first hackers linked to Chinese intelligence services to be captured by the FBI."

In 2020, the FBI issued a warning about Chinese state-sponsored hackers attempting to infiltrate US health groups focused on COVID-19 research. According to the alert, these actors were trying to identify and illicitly obtain valuable intellectual property (IP) and public health data related to vaccines, treatments, and testing.

"These actors have been observed attempting to identify and illicitly obtain valuable intellectual property (IP) and public health data related to vaccines, treatments, and testing from networks and personnel affiliated with COVID-19-related research," the FBI's alert stated. "The potential theft of this information jeopardizes the delivery of secure, effective, and efficient treatment options."

Federal investigations have requested that Xu be extradited to the US. However, his family claims that he is simply a technician for an IT company called Shanghai GTA Semiconductor Ltd.

The arrest marks a rare victory for the FBI in its efforts to take down Chinese state-sponsored hackers. While the Justice Department has charged suspected Chinese cyberspies before, those efforts have largely amounted to name-and-shame campaigns due to China's refusal to extradite suspects.

With Xu's arrest, the US may be sending a clear message that it will no longer tolerate cyber threats from state-sponsored actors. The FBI's involvement in the case demonstrates its commitment to protecting American interests and intellectual property.

The implications of this arrest go beyond the individual suspect

The arrest of Zewei Xu highlights the ongoing threat posed by Chinese state-sponsored hackers to US national security and intellectual property. As the global landscape continues to shift, it is clear that cyber threats will remain a major concern for governments and industries alike.

With this case, the FBI has demonstrated its ability to adapt and respond to emerging threats. The arrest of Xu marks a significant step forward in the US's efforts to counter Chinese cyber espionage.

The road ahead

As the investigation into Xu's activities continues, it is likely that more details will emerge about his role in the alleged cyberespionage campaign. The FBI and Justice Department are expected to provide further updates on their efforts to bring Xu to justice.

In the meantime, the US government must continue to prioritize its efforts to protect American interests from Chinese state-sponsored hackers. With the global landscape increasingly complex, it is clear that vigilance and cooperation between governments and industries will be essential in the fight against cyber threats.