U.S. Offers $4 Million in Rewards for Information on Alleged Chinese Cybercriminals

The U.S. Department of State’s Bureau of International Narcotics and Law Enforcement Affairs has announced reward offers of up to $2 million each for information leading to the arrests or convictions of two Chinese nationals accused of cyber-related crimes. The individuals, Yin KeCheng and Zhou Shuai, are alleged to be part of an advanced persistent threat group (APT27) linked to cyber intrusions and espionage.

The announcement, made under the Transnational Organized Crime Rewards Program (TOCRP), follows an FBI investigation into APT27, also known by various aliases in the cybersecurity sector, including “Threat Group 3390,” “Emissary Panda,” and “Iron Tiger.” U.S. officials claim that Yin and Zhou have engaged in cyber activities on behalf of multiple Chinese entities, financially benefiting as hackers for hire.

According to the Department of Justice, two separate indictments have been filed in connection with the case. Yin is charged with cybercrimes related to activity from 2013 to 2015, while both Yin and Zhou face conspiracy charges for computer network intrusions that allegedly took place between 2018 and 2020. The charges include wire fraud, money laundering, aggravated identity theft, and violations of the Computer Fraud and Abuse Act.

The reward program is part of broader efforts by the U.S. government to combat transnational cybercrime. In coordination with these actions, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has imposed sanctions on Zhou and his company, Shanghai Heiying Information Technology.

Officials encourage anyone with relevant information to contact the FBI via email at yin_zhou_info@fbi.gov or through local FBI field offices. Those outside the U.S. can report information at the nearest U.S. embassy or consulate. Authorities emphasize that all identities will be kept confidential, and government employees are not eligible for the reward.