Chinese state-sponsored contract hacker arrested in Italy at US request, DOJ says
Xu Zewei, 33, was arrested on Jul 3, the Justice Department said, adding a nine-count indictment was unsealed on Tuesday in the Southern District of Texas alleging the involvement of that individual and a co-defendant in computer intrusions between February 2020 and June 2021.
Xu was arrested in Milan, Italy, and will face extradition proceedings, the DOJ said in a statement.
It alleged China's ministry of state security had directed theft of COVID-19 research and the exploitation of Microsoft email software vulnerabilities.
The Chinese government has previously denied allegations of being involved. Liu Pengyu, a spokesperson for China's embassy in Washington, said on Tuesday China opposes all forms of cyber crimes, adding that "China has neither the need nor the intention to acquire vaccines through so-called theft".
Mao Ning, a spokesperson for China's foreign ministry, said on Thursday that China opposed "the use of so-called cyber issues to maliciously smear China" when asked about the case in a regular press briefing.
China opposes the extradition of Chinese citizens through a third country, Mao said, accusing the US of "abusing long-arm jurisdiction".
Xu's lawyer said on Tuesday that he is a victim of mistaken identity, that his surname is quite common in China and that his mobile phone had been stolen in 2020.
The 33-year-old IT manager at a Shanghai company appeared on Tuesday before an appeals court in Milan, which will decide whether to send him to the United States. The man was arrested last week after he arrived at Milan's Malpensa airport for a holiday in Italy with his wife.
US authorities allege that he was part of a team of hackers who in 2020 hacked and otherwise targeted US-based universities, immunologist, and virologists conducting research into COVID-19 vaccines, treatment, and testing. The US Justice Department says a research university located in the Southern District of Texas was also targeted.
The DOJ also says that in 2021, he was part of a cyber-espionage group known as Hafnium, which has alleged ties to the Chinese government and which "exploited zero-day vulnerabilities in US systems to steal additional research".
Hafnium targeted over 60,000 US entities, according to the DOJ.
The charges listed on the arrest warrant were wire fraud and aggravated identity theft, conspiracy to commit wire fraud and unauthorised access to protected computers.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
CNA
16 minutes ago
- CNA
Crypto bills set to advance this week take industry closer to mainstream
The crypto industry will take a step closer to going mainstream this week as a series of industry-friendly bills progress through Congress, paving the way for digital assets to potentially be further integrated into traditional finance. The House of Representatives is set to pass a series of crypto-related bills in a week which the Republican majority has dubbed "crypto week." The most notable is a bill that would establish a regulatory framework for stablecoins and is likely to advance to President Donald Trump's desk. That bill - and another the House is considering that would define when a crypto token is a commodity - is a huge win for the crypto industry, which has been pushing for federal legislation for years and poured money into last year's elections in order to promote pro-crypto candidates. "Historically, when lawmakers advance industry-backed frameworks, institutional sentiment strengthens. We expect capital that was previously sidelined due to regulatory uncertainty to re-enter," said Jag Kooner, head of derivatives at crypto exchange Bitfinex. "Crypto week" also comes as bitcoin has scaled record highs in recent days as investors dive back into risk assets on the back of tariff-related news, as well as expectations that legislation could potentially unlock capital in the crypto space. The big ticket item the House is set to vote on this week is a bill that would create a set of federal requirements for stablecoins. Stablecoins, a type of cryptocurrency designed to maintain a constant value, usually a 1:1 dollar peg, are commonly used by crypto traders to move funds between tokens. Their use has grown rapidly in recent years, and proponents say they could be used to send payments instantly. The bill, dubbed the GENIUS Act, received bipartisan support in the Senate, with several Democrats joining most Republicans to back the proposed federal rules. It is expected to pass the House and would then head to Trump, who has said he will sign it into law. The bill would require tokens to be backed by liquid assets - such as U.S. dollars and short-term Treasury bills - and for issuers to disclose publicly the composition of their reserves on a monthly basis. Crypto proponents say those rules could legitimize stablecoins, making banks, retailers and consumers more comfortable with using them to transfer funds. Ahead of the bill's final passage, many companies across sectors are already considering how they might incorporate stablecoins into their business, said Julia Demidova, head of digital currencies product and strategy at FIS, a financial technology solutions provider. "I think everyone is realizing, look, this is moving forward and they need to have a stablecoin strategy," she said. "They need to think how banks themselves will position against some of these novel, new, emerging fintech-issued stablecoins as well." Still, many Democrats have argued that the GENIUS Act would not prevent big tech companies from issuing their own private stablecoins, and have called for stronger anti-money laundering protections and prohibitions on foreign stablecoin issuers. Many Democrats fiercely oppose both the GENIUS Act and the CLARITY Act, arguing that they have too few consumer protections and would be a giveaway to Trump's own personal crypto ventures by enabling softer-touch regulation. Democratic members are expected to offer several amendments to both the GENIUS Act and the CLARITY Act on the House floor next week, according to a source familiar with the matter, but it is unclear whether any of them will be considered. The House will also vote next week on a bill that would prohibit the U.S. from issuing a central bank digital currency, which Republicans say violate Americans' privacy. The bill has not been considered in the Senate and the Federal Reserve has not indicated a desire to develop a central bank digital currency. MARKET STRUCTURE The House this week is also expected to pass a bill that aims to develop a regulatory regime for cryptocurrencies and would expand the Commodity Futures Trading Commission's oversight of the digital asset industry and is backed by the industry. If signed into law, the bill would define when a cryptocurrency is a security or a commodity and clarify the Securities and Exchange Commission's jurisdiction over the sector, something crypto companies heavily disputed during the Biden administration. That could help crypto companies avoid the oversight of the SEC, which under the Biden administration sued a number of crypto exchanges for flouting its rules. Crypto companies have argued that most crypto tokens should be classified as commodities, rather than securities, which would enable platforms to more easily offer those tokens to their customers. That bill, called the CLARITY Act, has yet to be considered in the Senate, where it would need to pass before heading to Trump for final approval. Trump has sought to overhaul U.S. cryptocurrency policies after courting cash from the industry during his presidential campaign. The sector spent more than $119 million backing pro-crypto congressional candidates in last year's elections. Trump's crypto ventures include a meme coin called $TRUMP, launched in January, and a business called World Liberty Financial, a crypto company owned partly by the president. The White House has said there are no conflicts of interest and that Trump's assets are in a trust managed by his children.
CNA
31 minutes ago
- CNA
Meta investors, Zuckerberg to square off at $8 billion trial over alleged privacy violations
WILMINGTON, Delaware :Mark Zuckerberg is expected to appear as a star witness in an unusual $8 billion trial that kicks off this week at which the Meta CEO is accused of operating Facebook as an illegal enterprise that allowed users' data to be harvested without their consent. Shareholders of Meta Platforms, the parent company of Facebook, Instagram and WhatsApp, sued Zuckerberg and other current and former company leaders, saying they continually violated a 2012 agreement between Facebook and the Federal Trade Commission to protect users' data. The case dates back to 2018, after it emerged that data from millions of Facebook users was accessed by Cambridge Analytica, a now-defunct political consulting firm that worked for Donald Trump's successful campaign for U.S. president in 2016. Shareholders want Zuckerberg and the other defendants to reimburse the company for more than $8 billion in fines and other costs paid by Meta after the Cambridge Analytica scandal came to light, including a record $5 billion fine imposed on Facebook by the FTC in 2019 for violating the 2012 agreement. Defendants in the case include former Chief Operating Officer Sheryl Sandberg, venture capitalist and board member Marc Andreessen, as well as former board members Peter Thiel, the Palantir Technologies co-founder, and Reed Hastings, the co-founder of Netflix. Zuckerberg and the other defendants, who declined to comment, have dismissed the allegations in court filings as "extreme claims." Meta, which is not a defendant, also declined to comment. The non-jury trial in Wilmington, Delaware, is scheduled to last eight days. It will mostly focus on decade-old events and board meetings to determine how Facebook leaders implemented the 2012 agreement. While the trial will cover long-ago policies, it comes as privacy concerns continue to dog Meta, which is under scrutiny for its training of AI models. The company says it has invested billions of dollars since 2019 in its program to safeguard users' privacy. Jason Kint, the head of Digital Content Next, a trade group for content providers, said the case will fill in details about what the board knew - and when - regarding the data of users, who now total more than 3 billion daily across Meta's platforms. "There's an argument we can't avoid Facebook and Instagram in our lives," he said. "Can we trust Mark Zuckerberg?" MOST DIFFICULT CLAIMS Two years ago, the defendants sought to dismiss the case before trial, which the judge declined. "This is a case involving alleged wrongdoing on a truly colossal scale," said Travis Laster, the judge handling the case at the time. The trial in the Court of Chancery will be overseen by Kathaleen McCormick. Now the plaintiffs, individual investors and union pension funds including California's State Teachers' Retirement System, must prove what is often described as the most difficult claim in corporate law - showing that directors utterly failed in their duty of oversight. Legal experts said it appears to be the first trial on such a claim. Zuckerberg and Sandberg are alleged to have knowingly caused the company to violate the law. While Delaware law protects directors and officers for bad business decisions, it does not protect them from illegal ones, even if they are profitable. Defendants said in court filings that plaintiffs cannot deliver the evidence. The shareholders in pretrial court papers said they can prove that after the 2012 agreement, Facebook continued deceptive privacy practices, at the direction of Zuckerberg. The defendants said the evidence will show that the company built a team to oversee privacy and hired an outside compliance firm and that Facebook was a victim of Cambridge Analytica's "studied deceit." In addition to the central privacy claims, plaintiffs also allege that when Zuckerberg could see that the Cambridge Analytica scandal was about break and send company stock lower, he was motivated to offload his stock and reaped at least $1 billion in profit. Defendants said evidence will show he used a stock-trading plan that can protect against insider-trading allegations. They also said the motivation was to benefit his charitable pursuits.
CNA
an hour ago
- CNA
Crypto exchanges rushed to list Trump's coin - leaving many losers and some big winners
NEW YORK :Crypto exchange Coinbase assures users on its website that it puts any new digital coin through "rigorous" vetting before allowing it to trade. It's an at-times lengthy process meant to protect customers by examining the people connected to the project and the risk of market manipulation or other scams. With President Donald Trump's crypto token, $TRUMP, Coinbase made up its mind in just one day. The $TRUMP token, which launched three days before his inauguration in January, is a meme coin. Based on cultural fads or celebrities, these coins have no intrinsic value and – past experience has shown – are prone to large price swings that can leave investors with losses. A Reuters analysis of crypto market data and industry announcements found that, compared to other recent large meme coins, the biggest crypto exchanges took Trump's to market with unusual speed, despite stating they vet risky coins thoroughly to protect small investors. Some also approved the listing in spite of the high share of coins concentrated in the hands of Trump and his partners, which would normally represent a red flag because of the risk that dumping of tokens by insiders could collapse the price and hurt other investors, some executives said. After reaching an all-time high of $75.35 on April 19, just two days after its launch, $TRUMP crashed to the $7 range by early April, leaving many holders nursing losses. It was trading around $9.55 Thursday. "When the president of the United States launches a meme coin, I thought I might as well put some money inside," said Carl 'Moon' Runefelt, a Dubai-based crypto investor who runs a bitcoin trading channel on YouTube called the "Moon Show." Runefelt said he bought $300,000 worth of the meme coin in tranches at between $50 and $60: "It's probably one of my worst trades, unfortunately." The Reuters analysis showed that eight of the 10 largest crypto exchanges by market share listed the coin within 48 hours of its release. The ninth, Coinbase, added $TRUMP to its listings roadmap on January 18 – indicating it had decided to accept it - and listed the coin three days later. The tenth, Upbit, listed $TRUMP on February 13. That was much faster than they've done on average with the biggest meme coins. Reuters examined how long it took the same 10 exchanges - Binance, Bitget, MEXC, OKX, Coinbase, Bybit, Upbit, and HTX - to list the four other largest meme coins launched since 2022. These, measured by market cap on May 29, are Pepe, Bonk, Fartcoin and dogwifhat. All 10 exchanges listed Pepe and Bonk. Nine listed dogwifhat, and seven listed Fartcoin. On average, the 10 exchanges took 129 days to list those coins. For $TRUMP, they took an average of four. Asked for comment about why they listed $TRUMP so quickly, Bitget, MEXC, OKX, Coinbase and Upbit all said they had not cut any corners with their vetting process. The other five exchanges did not respond to Reuters' questions. Three – Bitget, Coinbase, MEXC – said they moved fast to respond to overwhelming demand for the $TRUMP coin. "The crypto space was buzzing with the hype and, as any other token with a growing craze, it was imperative to add TRUMP," Gracy Chen, Bitget's CEO, said in a statement. Chen said the fact that Trump himself announced the coin on his social media accounts "should kind of solve the compliance issue," citing the fact that "he's the president of the United States." 'NO CONFLICTS OF INTEREST' Reuters found no suggestion that Trump or anyone related to his businesses exerted pressure on the exchanges. In response to a request for comment, a White House press official told Reuters the president's assets had been placed in a family trust: "There are no conflicts of interest because the president isn't managing the assets. Any insinuation that there is a conflict of interest is irresponsible." The official referred specific questions about the meme coin to the Trump Organization, which did not respond to Reuters. Coinbase said the $TRUMP token got no special exceptions and the exchange followed its normal process when listing the coin. Paul Grewal, Coinbase's chief legal officer, said many people had to work over the weekend to get the listing done quickly, but no steps were skipped. "Given the information that was shared publicly, we were confident that users could engage with the token positively and safely," Grewal told Reuters. Coinbase listed $TRUMP as an "experimental" token to indicate it comes with "certain risks, including price swings," according to the company's website. The vetting of coins often focuses on how well-known the issuer is, how likely they are to remain in the public eye and how much they engage with the online community to sustain interest in the coin, metrics that $TRUMP would score highly on, according to Santa Clara University finance professor Seoyoung Kim, who specializes in crypto analytics. She cautioned that focusing on vetting speed alone could provide an incomplete picture of investor protection. A more holistic analysis, Kim said, would also involve factors such as the average market cap at which a coin is listed, for how long it has sustained that level before its listing, and its daily trading volumes. With $TRUMP listed so soon after launch, there was little such data for exchanges to parse. $TRUMP's market cap has since fallen to around $1.9 billion, down sharply from its peak above $15 billion on January 19. But that still ranks it amongst the largest meme coins launched since 2022. Reuters ran its listing-speed analysis past five academics with crypto expertise, including Kim, who all said its methodology was sound. David Krause, Emeritus Professor of Finance at Marquette University, who has studied Trump's crypto ventures, said the quickness of the $TRUMP listing "suggests either a dramatic acceleration of due diligence or corners being cut." "Either scenario has significant implications for investor protection and market integrity," he said. YOU DON'T SAY NO TO THE PRESIDENT The president's rush of business ventures in a lightly-regulated sector that his government is responsible for overseeing has drawn criticism from Democrats, consumer advocacy groups and former financial enforcement officials. "You don't say no to hosting the president's new meme coin," said Corey Frayer, a former senior crypto advisor at the U.S. Securities and Exchange Commission. Frayer is now director of a non-profit advocacy group, the Consumer Federation of America. "The president controls who oversees your business and how they enforce the law." Under former President Joe Biden, the SEC maintained that most crypto tokens, including meme coins, should be regulated as securities, making exchanges cautious about listing them. That began to change, quickly, after Trump was elected last November. The Republican has styled himself as the "crypto president," pledging to overhaul regulation of the sector. Following Trump's election, Coinbase – the largest publicly traded crypto exchange in the United States – and several of its rivals began listing more meme coins. In Trump's second term, the SEC has paused or withdrawn high-profile enforcement actions against crypto operators, including a major investor in a Trump family crypto project, and issued a staff statement concluding that meme coins do not constitute securities. An SEC spokesperson declined to comment on the agency's crypto policy and Trump's coin. Trump's family has launched multiple crypto ventures, raking in hundreds of millions of dollars. The $TRUMP token quickly earned an estimated $320 million in fees, though it's not publicly known how that amount has been divided between a Trump-controlled entity and its partners. OVERLOOKED CONCERNS Exchanges have been major beneficiaries of Trump's embrace of the industry. $TRUMP has generated significant revenue for the 10 exchanges in Reuters' review: more than $172 million in trading fees, according to estimates based on standard fees compiled for the news agency by CoinDesk Data, a crypto industry data provider. Trade in the coin, meanwhile, has favored a small group of investors. At the top, 45 crypto wallets cleared about $1.2 billion in profits overall, while another 712,777 wallets have collectively lost $4.3 billion, according to trading data analyzed by crypto analysis firm Bubblemaps as of June 18. In the middle, more than half a million wallets made an average of $5,656 profit each. In listing $TRUMP, some exchanges proceeded despite a factor they'd previously labelled as a red flag: 80 per cent of the coin's supply was held by the Trump family and its partners. Such a high concentration of ownership can allow the team behind a coin to sell large amounts of it at once, collapsing the price for retail investors. The terms of the $TRUMP coin specified that its total supply would be gradually unlocked over three years after initial release. On January 16, the day before $TRUMP was released, the New York State Department of Financial Services issued an alert to consumers about the risks of meme coins. Such coins, the notice said, are carried by platforms not licensed by the state and the supply of the digital tokens is often controlled by a small number of people. That opens the door to "pump-and-dump schemes," the regulator noted, in which public hype by their issuers leads to a jump in price – with big, early investors exiting and smaller retail buyers left holding the losses that follow. The NYDFS declined to comment beyond the guidance. Coinbase, which is subject to New York regulations, blocked state residents from accessing the token, but allowed U.S. customers elsewhere to trade. To list $TRUMP in New York, the exchange would have faced a long list of risk assessment and governance requirements. Some other exchanges acknowledged they looked past concerns about the concentration in a bid to serve customer demand. MEXC's chief operating officer, Tracy Jin, told Reuters that, because of the concentration of tokens, $TRUMP did not meet its usual standards for a full listing on its main board, but the exchange pushed ahead anyway due to strong demand. In a follow-up written statement, an MEXC spokesperson said that a "faster-than-usual" listing was possible because the coin had clear market momentum and it met "our listing standards early." Commenting on the Reuters listing-speed analysis, the spokesperson said market conditions and demand for political meme tokens had changed since 2022, "making direct comparisons less relevant." Bitget also had concerns about the 80 per cent figure, CEO Chen told Reuters. "Eighty percent held by the team, even though there's a little bit of a lock-up period, is in my opinion very risky," said Chen. "Ultimately, user trading volume, demand … overrode the so-called risky factor here." Like some exchanges, Bitget, based in the Seychelles, does not have a business presence in the U.S. or serve clients who reside there, Chen said. "Globally," she added, "people are generally aware of the risks associated with trading meme coins." Upbit, which operates in South Korea, said it does not comment on specific coin listings but that it has "a rigorous and comprehensive evaluation process." Erald Ghoos, CEO for Europe of OKX, said the exchange's legal and compliance teams stayed up all night over different time zones to work on the listing. Seychelles-registered OKX says its diligence process requires "meticulous preparation." It decided to list $TRUMP within 26 hours.
