Seven Chinese nationals, allegedly linked to a prolific hacking group sponsored by their government, were indicted in the United States for a series of cyberattacks spanning over a decade. The U.S. Department of Justice revealed the charges, targeting hackers that conducted elaborate computer intrusions against American critics, businesses, and political figures.
The accused men, identified as Ni Gaobin, Weng Ming, Cheng Feng, Peng Yaowen, Sun Xiaohui, Xiong Wang, and Zhao Guangzong, are believed to be residing in China. They reportedly worked as part of the Advanced Persistent Threat 31 (APT31) hacking collective, and their operations were rooted in state espionage objectives. According to the Justice Department, these cyber campaigns not only aimed to repress dissent but to filch trade secrets and strategies from U.S-based firms.
U.S. Attorney General Merrick B. Garland, in a stiff warning to foreign actors, stated, "The Justice Department will not tolerate efforts by the Chinese government to intimidate Americans who serve the public, silence the dissidents who are protected by American laws, or steal from American businesses," underscoring the gravity of the cyber threats posed and the response they merit.
FBI Director Christopher Wray, emphasized the aggression of Chinese-sponsored cyber endeavors against American interests, "As long as China continues to target the US and our partners, the FBI will continue to send a clear message that cyber espionage will not be tolerated,” Wray said.
Allegations reveal that sophisticated techniques were used to compromise communication systems and gather intelligence. Among their tools were "zero-day" exploits, hacking methods unknown to manufacturers or victims, allowing undetected entry into networks. The group's breadth of operations included targeting dissidents, such as Hong Kong's pro-democracy figures and their allies, and leveraging espionage against political officials during the 2020 U.S. elections—though not directly affecting the outcomes.
The Justice Department's detailed account of the hacking operation indicated that the APT31 Group sent over 10,000 malicious emails designed to look like journalistic work or contain legitimate news content. These were embedded with tracking links, covertly collecting data on their targets once the emails were opened. The defendants played various roles in the operation, from testing and exploiting malware to managing the command-and-control infrastructure.
This indictment comes at a critical moment, as nations prepare for the 2024 election cycle. As Assistant Attorney General Matthew G. Olsen of the Justice Department’s National Security Division remarked, “Today’s announcements underscore the need to remain vigilant to cybersecurity threats and the potential for cyber-enabled foreign malign influence efforts." He stressed that the DOJ is committed to combating such breaches of security.
The seven individuals named stand accused, though the presumption of innocence remains until, and unless, proven guilty in a court of law. The prosecutors in charge hail from the Eastern District of New York, backed by expert assistance from the National Security Division’s National Security Cyber Section.
