Archive — US — techcrunch
Hacker who allegedly carried out cyberattacks for China is extradited to U.S.
Xu Zewei, accused of conducting cyberattacks for the Chinese government, has been extradited to the U.S. from Italy. Allegedly part of a group targeting U.S. universities and organizations, Xu and his partner Zhang Yu exploited Microsoft Exchange vulnerabilities. While the Chinese government opposes his extradition, this case continues a trend of U.S. efforts to hold Chinese hackers accountable.
Key points
- Xu Zewei is extradited to the U.S. from Italy after being accused of cyberattacks for the Chinese government.
- He is linked to the Hafnium group, which targeted over 60,000 entities in the U.S., successfully hacking more than 12,700.
- The cyberattacks involved stealing COVID-19 related research from U.S. universities.
- Xu and Zhang Yu allegedly exploited vulnerabilities in Microsoft Exchange servers.
- The Chinese Embassy has condemned the extradition, asserting the U.S. is fabricating cases against Chinese nationals.
- Previous instances of Chinese hackers being prosecuted include Yanjun Xu, sentenced in 2022.
Why it matters
- The case reflects ongoing tensions between the U.S. and China over cyber warfare and intellectual property theft.
- Similar cyberattacks have been reported, highlighting the cybersecurity challenges for U.S. institutions, especially during the COVID-19 pandemic.
- Xu's extradition marks a continued U.S. strategy to combat cybercrime by holding suspected state-sponsored hackers accountable.
- The Hafnium group’s activities align with broader trends in 2025 regarding government-related cyber threats and increased cybersecurity measures.
Xu Zewei's extradition exemplifies the U.S. commitment to addressing state-sponsored cyber threats, particularly in the complex landscape of U.S.-China relations as cybersecurity continues to dominate global discussions.