The federal government revealed an indictment and imposed sanctions on seven Chinese nationals. These individuals are accused of committing a series of cyber-related crimes spanning over a period of 14 years.
The Justice Department claims that the hacking group APT 31, based in the People’s Republic of China, has reportedly targeted various cities, businesses, political officials, and other entities to advance the espionage and foreign intelligence objectives of China’s Ministry of State.
Ni Gaobin, Weng Ming, Cheng Feng, Peng Yaowen, Sun Xiaohui, Xiong Wang, and Zhao Guangdong face charges of conspiracy to commit computer intrusions and wire fraud, as stated in the federal indictment filed on January 30 in New York’s Eastern District.
According to Deputy Attorney General Lisa Monaco, a group of seven Chinese nationals, ranging in age from 34 to 38 and believed to be residing in China, has been accused of sending “over 10,000 malicious emails, affecting thousands of victims across multiple continents.”
The U.S. Treasury’s Office of Foreign Assets Control has specifically targeted Zhao Guangzong, Ni Gaobin, and Xiaoruizhi Science and Technology Company, based in Wuhan, as they are believed to be involved in malicious cyber crimes. According to the Treasury, these entities pose a significant and long-standing threat to U.S. national security.
In February, the State Department announced a $10 million reward for any information that could help authorities track down the leaders of Hive ransomware. Hive is a multinational organized crime group that has already victimized individuals and organizations in 80 countries.
The government is actively seeking information on individuals who engage in specific malicious cyber activities that violate the Computer Fraud and Abuse Act, while acting at the direction or under the control of a foreign government, according to the State Department.
Attorney General Merrick Garland emphasized the extent to which the Chinese government is willing to take action against its critics, highlighting their use of malicious cyber operations that pose a threat to the national security of the United States and its allies.
