A chilling breach of trust unfolded as Xu, a Chinese national, was extradited to the United States this weekend to face federal charges. The accusations paint a disturbing picture of state-sponsored hacking during one of the world’s most vulnerable moments: the height of the COVID-19 pandemic.
Between 2020 and 2021, Xu and a network of collaborators allegedly targeted the very individuals racing to understand and combat the virus. Universities, leading immunologists, and virologists became the focus of a sophisticated cyberattack, with hackers gaining access to sensitive email accounts and critical research data.
The Justice Department has leveled nine charges against Xu, including wire fraud and aggravated identity theft. Each count of wire fraud alone carries a potential sentence of up to 20 years, highlighting the severity of the alleged crimes.
Court documents reveal a direct line of command stretching back to the highest levels of Chinese intelligence. Officers from the Ministry of State Security’s Shanghai State Security Bureau allegedly directed Xu’s actions, turning a cyber intrusion into a calculated act of espionage.
The evidence suggests a meticulous operation, with Xu providing regular updates to his handlers within the SSSB. On February 19, 2020, he reportedly confirmed a successful breach of a Texas research university’s network. Just days later, he received specific instructions to target the email accounts of virologists and immunologists.
Xu allegedly delivered on those instructions, confirming the acquisition of researchers’ private correspondence to his SSSB supervisors. This access could have compromised invaluable research, potentially hindering the development of life-saving treatments and vaccines.
Beyond the COVID-19 related attacks, Xu is also implicated as a key figure within “HAFNIUM,” a notorious hacking group responsible for a massive cyber intrusion campaign. This campaign compromised nearly 13,000 U.S. organizations, demonstrating the far-reaching scope of the alleged operation.
The extradition of Xu is a testament to international cooperation, with the FBI praising the tireless efforts of Italian authorities. Prefect Vittorio Pisani of the Italian National Police played a crucial role in securing Xu’s custody, working alongside U.S. investigators.
This case represents a stark warning about the growing threat of state-sponsored cyberattacks and the lengths to which some nations will go to gain a strategic advantage, even during a global health crisis.
