{"id":58001,"date":"2024-12-10T13:56:45","date_gmt":"2024-12-10T21:56:45","guid":{"rendered":"https:\/\/cjnotebook.com\/?p=58001"},"modified":"2024-12-10T14:01:42","modified_gmt":"2024-12-10T22:01:42","slug":"china-based-hacker-charged-for-conspiring-to-use-malware-that-exploited-tens-of-thousands-of-firewalls-worldwide","status":"publish","type":"post","link":"https:\/\/cjnotebook.com\/?p=58001","title":{"rendered":"China-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide"},"content":{"rendered":"
\n
\n
\"\"
Guan Tianfeng<\/figcaption><\/figure>\n

A federal court in Hammond, Indiana, unsealed an indictment on Tuesday charging Guan Tianfeng, a Chinese citizen, with conspiring to hack firewall devices globally in 2020, officials stated.<\/span><\/p>\n

Guan and his associates, working at Sichuan Silence Information Technology Co. Ltd., exploited an unknown “zero-day” vulnerability in firewalls developed by Sophos Ltd., a U.K.-based cybersecurity company.<\/span><\/p>\n

According to officials, the malware they created was designed to steal data and encrypt files if victims tried to remove the infection. Their operation compromised approximately 81,000 firewalls worldwide, including one used by a U.S. government agency.<\/span><\/p>\n<\/div>\n<\/div>\n

\"\"<\/p>\n

\n
\n

\u201cThe defendant and his conspirators compromised tens of thousands of firewalls and then continued to hold at risk these devices, which protect computers in the United States and around the world,\u201d said Assistant Attorney General for National Security Matthew G. Olsen. \u201cThe Department of Justice will hold accountable those who contribute to the dangerous ecosystem of China-based enabling companies that carry out indiscriminate hacks on behalf of their sponsors and undermine global cybersecurity.\u201d<\/span><\/p>\n

Defendants are presumed innocent unless proven guilty.<\/span><\/p>\n

FBI Wanted Poster<\/a><\/span><\/p>\n

The Conspiracy to Exploit Common Vulnerabilities and Exposures (CVE) 2020-12271<\/u><\/span><\/p>\n

\"LaAccording to the indictment, Guan and his co-conspirators <\/span>created, tested, and deployed malware in 2020 that exploited a zero-day vulnerability in Sophos firewalls, later identified as CVE-2020-12271. The attack targeted about 81,000 firewalls worldwide, including those in the Northern District of Indiana.<\/span><\/p>\n

The malware was designed to steal data from the firewalls. To disguise their actions, the group used fake domains resembling legitimate Sophos domains, such as sophosfirewallupdate.com. Sophos quickly identified the breach and secured its customers’ firewalls within two days. In response, the conspirators modified their malware to include ransomware that encrypted files if removal was attempted. Although the encryption failed, their actions showed a blatant disregard for the damage they could inflict on victims.<\/span><\/p>\n

Guan Tianfeng\u2019s Employment and Sichuan Silence\u2019s Relationship with the PRC Government<\/u><\/span><\/p>\n

\n
\n
\n
\n

\"\"Court documents reveal that Guan worked for Sichuan Silence, a China-based private company that has provided services to the PRC Ministry of Public Security and other government organizations. According to its website, Sichuan Silence developed tools to scan and identify overseas network targets for intelligence gathering.<\/span><\/p>\n

In October, Sophos published a series of articles from its long-running investigation, “Pacific Rim.” The investigation uncovered PRC-based advanced persistent threat groups targeting Sophos networking devices for over five years, displaying deep knowledge of the devices\u2019 internal firmware architecture. One of the attacks highlighted in the report involved the CVE-2020-12271 vulnerability.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

Soon after the Sophos announcements in October, the FBI issued a\u00a0call for information<\/a>\u00a0regarding computer intrusions into Sophos edge devices. <\/span><\/p>\n

The FBI continues to solicit information on PRC-sponsored malicious actors targeting edge devices and network security appliances.<\/span><\/p>\n

The U.S. Department of State also\u00a0announced<\/a>\u00a0rewards today of up to $10 million for information leading to the identification or location of Guan or any person who, while acting at the direction or under the control of a foreign government, engages in certain malicious cyber activities against U.S. critical infrastructure in violation of the Computer Fraud and Abuse Act. <\/span><\/p>\n

The U.S. Department of the Treasury\u2019s Office of Foreign Assets Control also\u00a0announced<\/a> sanctions on Sichuan Silence and Guan.<\/span><\/p>\n

Trial Attorneys Jacques Singer-Emery and George Brown of the National Security Division\u2019s National Security Cyber Section and Assistant U.S. Attorney Steven J. Lupa for the Northern District of Indiana are prosecuting the case.<\/span><\/p>\n

The FBI continues to investigate Sichuan Silence\u2019s hacking activities and intrusions into various edge devices.<\/span><\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

A federal court in Hammond, Indiana, unsealed an indictment on Tuesday charging Guan Tianfeng, a Chinese citizen, with conspiring to hack firewall devices globally in 2020, officials stated. Guan and his associates,…<\/p>\n","protected":false},"author":1,"featured_media":58003,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-58001","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"yoast_head":"\nChina-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide<\/title>\n<meta name=\"description\" content=\"A federal court in Hammond, Indiana, unsealed an indictment on Tuesday charging Guan Tianfeng, a Chinese citizen, with conspiring to hack firewall devices\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cjnotebook.com\/?p=58001\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"China-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide\" \/>\n<meta property=\"og:description\" content=\"A federal court in Hammond, Indiana, unsealed an indictment on Tuesday charging Guan Tianfeng, a Chinese citizen, with conspiring to hack firewall devices\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cjnotebook.com\/?p=58001\" \/>\n<meta property=\"og:site_name\" content=\"American Justice Notebook\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AmericanJusticeNotebook\" \/>\n<meta property=\"article:published_time\" content=\"2024-12-10T21:56:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-12-10T22:01:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cjnotebook.com\/wp-content\/uploads\/2024\/12\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Raul\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Raul\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001\"},\"author\":{\"name\":\"Raul\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#\\\/schema\\\/person\\\/f5521baddca77b521f012298775186c0\"},\"headline\":\"China-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide\",\"datePublished\":\"2024-12-10T21:56:45+00:00\",\"dateModified\":\"2024-12-10T22:01:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001\"},\"wordCount\":609,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp\",\"articleSection\":[\"American Justice\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/cjnotebook.com\\\/?p=58001#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001\",\"name\":\"China-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp\",\"datePublished\":\"2024-12-10T21:56:45+00:00\",\"dateModified\":\"2024-12-10T22:01:42+00:00\",\"description\":\"A federal court in Hammond, Indiana, unsealed an indictment on Tuesday charging Guan Tianfeng, a Chinese citizen, with conspiring to hack firewall devices\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cjnotebook.com\\\/?p=58001\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=58001#primaryimage\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp\",\"contentUrl\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp\",\"width\":1200,\"height\":800},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#website\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/\",\"name\":\"American Justice Notebook\",\"description\":\""Our liberty depends on the freedom of the press, and that cannot be limited without being lost." \u2014 Thomas Jefferson\",\"publisher\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cjnotebook.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#organization\",\"name\":\"American Justice Notebook\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/Justice-Scales.jpg\",\"contentUrl\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/Justice-Scales.jpg\",\"width\":675,\"height\":231,\"caption\":\"American Justice Notebook\"},\"image\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/AmericanJusticeNotebook\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#\\\/schema\\\/person\\\/f5521baddca77b521f012298775186c0\",\"name\":\"Raul\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g\",\"caption\":\"Raul\"},\"description\":\"Raul Hernandez is a former journalist. He has worked as a newspaper reporter for more than 30 years at the El Paso Herald-Post, El Paso Times, Press Enterprise in Riverside, California and the Ventura County Star in California. He was a court reporter for more than 20 years.\",\"sameAs\":[\"https:\\\/\\\/cjnotebook.com\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"China-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide","description":"A federal court in Hammond, Indiana, unsealed an indictment on Tuesday charging Guan Tianfeng, a Chinese citizen, with conspiring to hack firewall devices","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cjnotebook.com\/?p=58001","og_locale":"en_US","og_type":"article","og_title":"China-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide","og_description":"A federal court in Hammond, Indiana, unsealed an indictment on Tuesday charging Guan Tianfeng, a Chinese citizen, with conspiring to hack firewall devices","og_url":"https:\/\/cjnotebook.com\/?p=58001","og_site_name":"American Justice Notebook","article_publisher":"https:\/\/www.facebook.com\/AmericanJusticeNotebook","article_published_time":"2024-12-10T21:56:45+00:00","article_modified_time":"2024-12-10T22:01:42+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2024\/12\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp","type":"image\/webp"}],"author":"Raul","twitter_misc":{"Written by":"Raul","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cjnotebook.com\/?p=58001#article","isPartOf":{"@id":"https:\/\/cjnotebook.com\/?p=58001"},"author":{"name":"Raul","@id":"https:\/\/cjnotebook.com\/#\/schema\/person\/f5521baddca77b521f012298775186c0"},"headline":"China-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide","datePublished":"2024-12-10T21:56:45+00:00","dateModified":"2024-12-10T22:01:42+00:00","mainEntityOfPage":{"@id":"https:\/\/cjnotebook.com\/?p=58001"},"wordCount":609,"commentCount":0,"publisher":{"@id":"https:\/\/cjnotebook.com\/#organization"},"image":{"@id":"https:\/\/cjnotebook.com\/?p=58001#primaryimage"},"thumbnailUrl":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2024\/12\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp","articleSection":["American Justice"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cjnotebook.com\/?p=58001#respond"]}]},{"@type":"WebPage","@id":"https:\/\/cjnotebook.com\/?p=58001","url":"https:\/\/cjnotebook.com\/?p=58001","name":"China-Based Hacker Charged for Conspiring to Use Malware That Exploited Tens of Thousands of Firewalls Worldwide","isPartOf":{"@id":"https:\/\/cjnotebook.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cjnotebook.com\/?p=58001#primaryimage"},"image":{"@id":"https:\/\/cjnotebook.com\/?p=58001#primaryimage"},"thumbnailUrl":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2024\/12\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp","datePublished":"2024-12-10T21:56:45+00:00","dateModified":"2024-12-10T22:01:42+00:00","description":"A federal court in Hammond, Indiana, unsealed an indictment on Tuesday charging Guan Tianfeng, a Chinese citizen, with conspiring to hack firewall devices","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cjnotebook.com\/?p=58001"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cjnotebook.com\/?p=58001#primaryimage","url":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2024\/12\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp","contentUrl":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2024\/12\/fb5fc4ec-3cfb-4645-8b6e-ef83c81ba746_81a5ff7f.webp","width":1200,"height":800},{"@type":"WebSite","@id":"https:\/\/cjnotebook.com\/#website","url":"https:\/\/cjnotebook.com\/","name":"American Justice Notebook","description":""Our liberty depends on the freedom of the press, and that cannot be limited without being lost." \u2014 Thomas Jefferson","publisher":{"@id":"https:\/\/cjnotebook.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cjnotebook.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cjnotebook.com\/#organization","name":"American Justice Notebook","url":"https:\/\/cjnotebook.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cjnotebook.com\/#\/schema\/logo\/image\/","url":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2014\/07\/Justice-Scales.jpg","contentUrl":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2014\/07\/Justice-Scales.jpg","width":675,"height":231,"caption":"American Justice Notebook"},"image":{"@id":"https:\/\/cjnotebook.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/AmericanJusticeNotebook"]},{"@type":"Person","@id":"https:\/\/cjnotebook.com\/#\/schema\/person\/f5521baddca77b521f012298775186c0","name":"Raul","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g","caption":"Raul"},"description":"Raul Hernandez is a former journalist. He has worked as a newspaper reporter for more than 30 years at the El Paso Herald-Post, El Paso Times, Press Enterprise in Riverside, California and the Ventura County Star in California. He was a court reporter for more than 20 years.","sameAs":["https:\/\/cjnotebook.com\/"]}]}},"_links":{"self":[{"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/posts\/58001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=58001"}],"version-history":[{"count":7,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/posts\/58001\/revisions"}],"predecessor-version":[{"id":58011,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/posts\/58001\/revisions\/58011"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/media\/58003"}],"wp:attachment":[{"href":"https:\/\/cjnotebook.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=58001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=58001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=58001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}