10 Chinese Nationals Indicted in Alleged Cyber Hacking Scheme Targeting U.S. on Behalf of Chinese Government

Federal prosecutors have announced charges against 10 Chinese nationals accused of engaging in a widespread cyber hacking operation allegedly conducted on behalf of the Chinese government. The individuals, including two Chinese officials, are alleged to have targeted various entities, including U.S. government agencies, foreign ministries, journalists, religious organizations, and critics of the Chinese Communist Party (CCP).

According to the U.S. Department of Justice (DOJ), the suspects, who remain at large, worked through i-Soon, a private Chinese cybersecurity company that prosecutors claim operated at the direction of China’s Ministry of State Security (MSS) and Ministry of Public Security (MPS). The indictment, unsealed by the U.S. Attorney’s Office for the Southern District of New York, outlines charges related to conspiracy to commit computer intrusions and wire fraud.

The DOJ alleges that from 2016 to 2023, i-Soon engaged in extensive cyber intrusions targeting high-profile victims, including a New York-based newspaper critical of the CCP, a Texas-based human rights organization, multiple foreign ministries in Asia, and U.S. agencies such as the Defense Intelligence Agency and the Department of Commerce. The indictment claims i-Soon hacked email accounts, servers, and mobile devices, at times selling stolen data to different Chinese government bureaus.

Federal officials have characterized the alleged operation as part of broader state-sponsored efforts to gather intelligence and suppress dissent. Acting U.S. Attorney Matthew Podolsky stated that "state-sponsored hacking is an acute threat to our community and national security." Officials from the DOJ’s National Security Division and the FBI have also emphasized their commitment to disrupting similar cyber threats.

Prosecutors say i-Soon developed and sold hacking tools designed to exploit vulnerabilities in widely used systems, including Microsoft Outlook, Gmail, and Android. The company purportedly provided training to MPS officials on hacking techniques and developed software capable of bypassing multi-factor authentication. One such tool, the "Public Opinion Guidance and Control Platform (Overseas)," was reportedly designed to monitor international discussions about China and influence public perception.

Victims of the cyber campaign are alleged to include a U.S.-based religious organization with millions of members, a Hong Kong newspaper known for its coverage of Chinese politics, and several foreign ministries, including those of Taiwan, India, South Korea, and Indonesia. Prosecutors claim many targets were selected due to their critical stance toward the Chinese government or their communications with U.S. officials.

The 10 defendants, all Chinese nationals, face charges of conspiracy to commit computer intrusions, carrying a maximum sentence of five years in prison, and conspiracy to commit wire fraud, which carries a maximum penalty of 20 years. The U.S. government has issued warrants for their arrest and is seeking international cooperation in locating them.

The case is being handled by the Southern District of New York’s Complex Frauds and Cybercrime Unit, with support from the National Security Division’s National Security Cyber Section. The FBI continues to investigate the case, and officials urge individuals with relevant information to contact the Department of State’s Rewards for Justice program.

Chinese authorities have not publicly responded to the allegations. The indictment underscores ongoing tensions between the U.S. and China over cybersecurity and international espionage, adding to a history of accusations related to state-sponsored cyber activities.

The legal proceedings are ongoing, and the defendants are presumed innocent until proven guilty in court.