{"id":831938,"date":"2025-03-06T08:11:31","date_gmt":"2025-03-06T14:11:31","guid":{"rendered":"https:\/\/newsycanuse.com\/index.php\/2025\/03\/06\/us-says-china-paid-hackers-to-target-critics-steal-data\/"},"modified":"2025-03-06T08:11:31","modified_gmt":"2025-03-06T14:11:31","slug":"us-says-china-paid-hackers-to-target-critics-steal-data","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2025\/03\/06\/us-says-china-paid-hackers-to-target-critics-steal-data\/","title":{"rendered":"US Says China Paid Hackers to Target Critics, Steal Data"},"content":{"rendered":"
\n
\n

US prosecutors charged ten Chinese citizens and two government agents for computer hacks that targeted dissidents, religious groups, news outlets and American government agencies. <\/p>\n<\/div>\n

\n

The Chinese government paid Anxun Information Technology Co., a cybersecurity firm also known as i-Soon, to hack and steal information in a manner that obscured its involvement, the US alleges. <\/p>\n<\/div>\n

\n

Eight iSoon employees and two Chinese Ministry of Public Security officials were accused with various crimes for their alleged hacking of email accounts, mobile phones, servers and websites between 2016 and 2023, according to an indictment unsealed Wednesday. Separate charges were also made public against two other Chinese citizens, who prosecutors said in a statement were linked to a recent breach of the US Treasury Department. <\/p>\n<\/div>\n

\n

\u201cWe will continue to fight to dismantle this ecosystem of cyber mercenaries and protect our national security,\u201d Sue J. Bai, head of the Justice Department\u2019s national security division, said in a statement.\u00a0 <\/p>\n<\/div>\n

\n

Representatives for i-Soon, which is based in Shanghai, didn\u2019t respond to requests for comment. A Chinese government official said the indictments were based on \u201cgroundless speculation and accusations.\u201d <\/p>\n<\/div>\n

\n

\u201cWe urge the US to stop using cybersecurity issues to smear China,\u201d said Liu Pengyu, a spokesperson for the Chinese Embassy in Washington.\u00a0 <\/p>\n<\/div>\n

\n

The individual defendants didn\u2019t have lawyers listed for them in court records and couldn\u2019t be immediately contacted for comment. They have not been arrested and the US State Department is offering a reward for information leading to their locations, according to a statement from the Justice Department.\u00a0 <\/p>\n<\/div>\n

\n

i-Soon drew notice last year when files attributed to the company were posted on the code-sharing site GitHub, revealing how cybersecurity firms, researchers and the government in China were intricately intertwined.\u00a0 <\/p>\n<\/div>\n

\n

According to US prosecutors, i-Soon staff sometimes acted at the direction of the Chinese government, and on other occasions chose their own hacking targets and then sold stolen material to various Chinese government agencies. These campaigns allegedly earned the firm tens of millions of dollars in revenue. <\/p>\n<\/div>\n

\n

The victims of i-Soon\u2019s hacking include at least three news outlets, the US Department of Commerce, the International Trade Administration, the Defense Intelligence Agency, a religious group with thousands of churches and staff of the New York State Assembly, according to the indictment, which doesn\u2019t identify the news outlets or religious group by name. The hackers also allegedly targeted a person in the US who\u2019s been critical of the Chinese government and a Texas-based group that promotes human rights in China. <\/p>\n<\/div>\n

\n

Prosecutors in Washington separately accused two other Chinese nationals of a years-long scheme of hacking and selling stolen data for profit, and they seized internet domains and a computer server the alleged hackers used. Prosecutors accused the pair of causing millions of dollars of damage by breaking into the computer systems of US-based technology companies, think tanks, law firms, local governments, health-care systems and others.\u00a0 <\/p>\n<\/div>\n

\n

The pair weren\u2019t charged with hack of the Treasury Department last year. However, prosecutors said in court filings that servers used in that attack were controlled by an account the two had set up.\u00a0 <\/p>\n<\/div>\n

\n

A Treasury report on the breach found that Chinese state-sponsored hackers got into unclassified material on more than 400 laptop and desktop computers, taking particular interest in the machines of staff and senior leaders focused on sanctions, international affairs and intelligence. The compromised devices included then-Secretary Janet Yellen\u2019s computer, Bloomberg News previously reported.\u00a0 <\/p>\n<\/div>\n

\n

According to the court records, a key part of i-Soon\u2019s business was using cyberattacks to steal data on behalf of the Chinese government, including the Ministry of Public Security and the Ministry of State Security. The company charged the ministries the equivalent of between $10,000 and $75,000 for each email inbox it successfully hacked, US prosecutors said. i-Soon allegedly offered analysis of the data for an additional fee. <\/p>\n<\/div>\n

\n

One method i-Soon employees used for hacking was \u201cspearphishing,\u201d a type of phishing attack that targets a specific person or group. The company developed a set of rules for employees to follow when attempting such a hack, according to the US. \u201cFor example, the first rule stated, \u2018No batch sending, not batch sending, no batch sending,\u201d according to the indictment. \u201cSpearphishing emails are easier to detect as malicious if they are sent repeatedly.\u201d <\/p>\n<\/div>\n

\n

This article was generated from an automated news agency feed without modifications to text.<\/strong><\/p>\n<\/div>\n<\/div>\n

\n

Catch all the Business News <\/a>, Breaking News <\/a>Events and Latest News <\/a> Updates on Live Mint. Download The Mint News App <\/a> to get Daily Market Updates.<\/p>\n

\n
Business News<\/a>News<\/a>Us News<\/a>US Says China Paid Hackers to Target Critics, Steal Data<\/div>\n<\/div>\n

More<\/span>Less<\/span><\/div>\n

Read More<\/a>
\n Lyndia Wiers<\/p>\n","protected":false},"excerpt":{"rendered":"

US prosecutors charged ten Chinese citizens and two government agents for computer hacks that targeted dissidents, religious groups, news outlets and American government agencies. The Chinese government paid Anxun Information Technology Co., a cybersecurity firm also known as i-Soon, to hack and steal information in a manner that obscured its involvement, the US alleges. Eight<\/p>\n","protected":false},"author":1,"featured_media":831939,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1827,183],"tags":[],"class_list":{"0":"post-831938","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-china","8":"category-hackers"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/831938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=831938"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/831938\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/831939"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=831938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=831938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=831938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}