In a significant move, US prosecutors have charged twelve Chinese nationals for participating in an alleged hacking scheme that targeted US-based dissidents and sold their data to the Chinese government. The Justice Department unsealed the charges in a federal court in Manhattan, highlighting the state-sponsored nature of the operation that infiltrated various government agencies, including the Treasury. This marks another chapter in the ongoing cybersecurity tensions between the US and China.
The operation, linked to a private company known as i-Soon, is reported to have targeted individuals and organizations considered critical of the People's Republic of China (PRC). Among those affected were US-based dissidents, a Hong Kong newspaper, and an American religious organization known for sending missionaries to China and opposing the PRC government. Hackers involved in this scheme received payments ranging from $10,000 to $75,000 for each successfully exploited email inbox.
In addition to targeting dissidents, the hacking network extended its reach to the foreign ministries of Taiwan, India, South Korea, and Indonesia. This aligns with a broader pattern of hacking activities attributed to China. Notably, in October, both the FBI and the Cybersecurity and Infrastructure Security Agency identified hacks on two major US presidential campaigns as being conducted by actors affiliated with China. Furthermore, in December, the Treasury Department reported a significant breach by Chinese-sponsored hackers.
"Today, we are exposing the Chinese government agents directing and fostering indiscriminate and reckless attacks against computers and networks worldwide," stated Sue J Bai.
Despite these serious allegations, China has not responded specifically to these charges. Historically, China has denied involvement in such hacking operations, dismissing accusations as baseless.
The Chinese government has stated it "consistently opposes all forms of hacking."
The Justice Department's actions emphasize a commitment to countering cyber threats from state-sponsored actors.
"We will continue to fight to dismantle this ecosystem of cyber mercenaries and protect our national security," added Sue J Bai.