China-Sponsored Hacker Stole COVID Data from Top US Universities, Labs: Feds

A Chinese national has been caught red-handed for stealing sensitive COVID-19 data from top US universities and research labs as part of a government-sponsored cyberattack. The shocking revelation was made by federal prosecutors on Tuesday, revealing the extent of China's alleged involvement in the hacking scandal.

The Mastermind Behind the Cyberattack

Meet Zewei Xu, 33, a Chinese national who infiltrated American research facilities as an agent for China's Ministry of State Security and the Shanghai State Security Bureau. According to federal prosecutors, Xu was on the run since 2023 but was recently caught by the FBI and international authorities in Milan, Italy.

Xu's alleged crimes date back to February 2020, when he targeted universities in Texas and elsewhere, as well as leading immunologists and virologists working on COVID vaccines. He allegedly contacted his Chinese handlers to report that he had compromised a network, and was told to "access specific email accounts belonging to virologists and immunologists engaged in COVID-19 research,"

The Scope of the Cyberattack

According to prosecutors, Xu and his accomplice, 44-year-old Yu Zhang, were part of a coordinated Chinese cyberattack on various US industries, known as "Hafnium." This attack was identified and exposed by Microsoft in 2021. The pair allegedly targeted universities, research labs, and leading experts in the field of COVID vaccines between February 2020 and June 2021.

The Motive Behind the Cyberattack

As FBI Houston Special Agent in Charge Douglas Williams stated, "While the world was reeling from a virus that originated in China, the Chinese government plotted to steal US research critical to vaccine development." The indictment reveals that Xu and Zhang were part of a Chinese-sponsored covert plot to steal US data on COVID-19 research.

The Aftermath and Consequences

Xu and Zhang were indicted on wire fraud conspiracy and related federal hacking charges in November 2023. However, the charges remained sealed until Xu's arrest in Italy. "The Southern District of Texas has been waiting years to bring Xu to justice, and that day is nearly at hand," said district US Attorney Nicholas Ganjei.

"As this case shows, even if it takes years we will track hackers down and make them answer for their crimes. 'The United States does not forget',"

The Significance of the Arrest

"[Xu's] landmark arrest by FBI Houston agents in Italy proves that we will scour the ends of the Earth to hold criminal foreign adversaries accountable," said Williams. The arrest marks a significant victory for US authorities, who have been working tirelessly to track down and bring to justice those responsible for this cyberattack.