Hacker who allegedly carried out cyberattacks for China is extradited to U.S.

A man accused of carrying out cyberattacks on behalf of the Chinese government has been extradited to the United States, according to his lawyer. 

Last year, the U.S. Justice Department accused Xu Zewei of working as a contractor for the Chinese Ministry of State Security to conduct a series of cyberattacks. Prosecutors alleged Xu and co-conspirator Zhang Yu targeted several U.S. universities in early 2020 to steal research related to the COVID-19 pandemic. The two also allegedly hacked thousands of email servers running Microsoft Exchange beginning March 2021, as part of an “indiscriminate” campaign attributed to a Chinese-backed hacking group known as Hafnium, and later Silk Typhoon.

Xu was arrested in Italy last year at the request of U.S. authorities. His lawyer in Italy, Simona Candido, told TechCrunch that Xu was extradited to the United States on Saturday, and that he is now in detention in Houston, Texas. 

According to the U.S. Bureau of Prison’s website, a man with the same name is in custody at the Federal Detention Center in Houston. 

Xu’s lawyer in the United States, Dan Cogdell, was scheduled to appear at a hearing in Houston on Monday, according to court records. Cogdell told TechCrunch that he found out about the hearing earlier on Monday. 

Angela Dodge, a spokesperson for the U.S. Attorney’s Office in the Southern District of Texas, which is prosecuting Xu’s case, acknowledged receipt of an email but did not immediately respond to TechCrunch’s questions about Xu.

As the Justice Department said when it initially announced charges against the accused hackers, Xu allegedly worked for Shanghai Powerock Network, a company in China that prosecutors said “conducted hacking” for Beijing. Xu and other hackers allegedly reported their activities directly to Chinese state officials in Shanghai.

Along with Zhang, he was part of the Hafnium group that allegedly took advantage of previously undiscovered security flaws in Microsoft Exchange servers with the aim of hacking into several American organizations, including defense contractors, law firms, think tanks, and infectious disease researchers. 

According to prosecutors, Hafnium hackers targeted more than 60,000 entities in the U.S. and were successful in hacking more than 12,700 of them. 

The Chinese Embassy in Washington D.C. did not respond to a request for comment.  

The Financial Times reported that the Chinese Foreign Ministry opposed Xu’s extradition and accused the U.S. government of “fabricating cases.” 

For years, the U.S. government has charged suspected Chinese hackers, many of whom remain at large. In 2022, Yanjun Xu was sentenced to 20 years in prison for hacking crimes in what the DOJ said was the first case where a Chinese government intelligence officer had been extradited to the United States.