EXPLORINEER
en

Archive — US — techcrunch

Justice Department charges Chinese hackers-for-hire linked to Treasury breach

The DOJ has charged 12 Chinese hackers linked to a decade-long campaign that targeted over 100 U.S. organizations, including the U.S. Treasury. The hackers, involved in China's hacker-for-hire ecosystem, exploited security flaws to steal data for profit, suppress free speech, and benefit Chinese state interests. Rewards for information leading to their arrest have been announced.

Key points

  • 12 hackers linked to Chinese government charged by DOJ for targeting over 100 organizations, including U.S. Treasury.
  • The accused are part of a hacker-for-hire ecosystem and include both contract hackers and law enforcement officials.
  • Key individuals, Yin Kecheng and Zhou Shuai, exploited security vulnerabilities in major software since 2013, including Microsoft Exchange.
  • Yin is linked to a significant breach of the U.S. Treasury in December 2024, earning him sanctions from the Treasury Department.
  • I-Soon hacking contractor's employees also charged, accused of targeting U.S. organizations from 2016 to 2023.
  • FBI has seized infrastructure used by the hackers to execute their operations; defendants remain at large with rewards announced for information.

Why it matters

  • The event underscores increasing cyber threats from state-sponsored actors amid rising geopolitical tensions, reflecting broader concerns about global cybersecurity in 2025.
  • Hacker-for-hire services have become a prominent trend in cybercrime, highlighting the intersection of criminality and state interests in modern cybersecurity dynamics.
  • This reflects a shift in global security focus, with countries prioritizing protection against cyber threats involving advanced persistent threats (APTs) and state-affiliated hackers.

The DOJ's charges against these hackers highlight a critical cybersecurity challenge, revealing the threat posed by state-sponsored hacking. As organizations increase their digital reliance, protecting against such complex cyber threats remains paramount.