{"id":60836,"date":"2026-04-27T15:10:19","date_gmt":"2026-04-27T22:10:19","guid":{"rendered":"https:\/\/cjnotebook.com\/?p=60836"},"modified":"2026-04-27T15:11:50","modified_gmt":"2026-04-27T22:11:50","slug":"chinese-hacker-extradited-in-hafnium-case-targeting-u-s-covid-19-research-law-firm","status":"publish","type":"post","link":"https:\/\/cjnotebook.com\/?p=60836","title":{"rendered":"Chinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm"},"content":{"rendered":"

HOUSTON<\/strong><\/span><\/p>\n

\"\"<\/p>\n

A Chinese national extradited to the United States this weekend made his initial court appearance Monday in federal court in Houston, facing alleged charges tied to a global hacking campaign that targeted thousands of computers, including U.S. COVID-19 research systems.<\/span><\/p>\n

Xu Zewei, 34<\/strong>, of the People\u2019s Republic of China, was charged in a nine-count indictment<\/strong> alleging his role in computer intrusions from February 2020 to June 2021<\/strong>, according to court documents.<\/span><\/p>\n

Prosecutors allege some of the intrusions were part of the HAFNIUM cyber campaign<\/strong>, which compromised thousands of computers worldwide<\/strong>, including in the United States. Other attacks allegedly targeted U.S. COVID-19 research<\/strong> at the height of the pandemic.<\/span><\/p>\n

Xu is charged alongside Zhang Yu, 44<\/strong>, also a Chinese national.<\/span><\/p>\n

Authorities allege Xu acted at the direction of officers with the People\u2019s Republic of China\u2019s Ministry of State Security (MSS)<\/strong> and its Shanghai State Security Bureau (SSSB)<\/strong> \u2014 intelligence agencies responsible for counterintelligence, foreign intelligence, and political security operations<\/strong>.<\/span><\/p>\n

At the time of the alleged offenses, Xu worked for Shanghai Powerock Network Co. Ltd.<\/strong>, described by prosecutors as one of several \u201cenabling\u201d companies<\/strong> used to conduct hacking operations on behalf of the Chinese government.<\/span><\/p>\n

Quick Facts<\/strong><\/span><\/h3>\n
    \n
  • Defendant:<\/strong> Xu Zewei, 34, People\u2019s Republic of China<\/span><\/li>\n
  • Charges:<\/strong> Nine-count indictment involving computer intrusions<\/span><\/li>\n
  • Timeline:<\/strong> February 2020 to June 2021<\/span><\/li>\n
  • Campaign:<\/strong> HAFNIUM cyberattack<\/strong> targeting thousands of systems<\/span><\/li>\n
  • Targets:<\/strong> U.S. COVID-19 research<\/strong> and global computer networks<\/span><\/li>\n
  • Co-Defendant:<\/strong> Zhang Yu, 44<\/span><\/li>\n
  • Alleged Direction:<\/strong> PRC Ministry of State Security (MSS)<\/strong> and SSSB<\/strong><\/span><\/li>\n
  • Employer:<\/strong> Shanghai Powerock Network Co. Ltd.<\/span><\/li>\n<\/ul>\n

    Federal prosecutors allege a Chinese national and his co-conspirators targeted U.S. universities and COVID-19 researchers, then expanded into a global hacking campaign exploiting Microsoft email systems.<\/span><\/p>\n

    According to court documents, Xu Zewei, 34<\/strong>, and others in early 2020 hacked U.S.-based universities, including immunologists and virologists researching COVID-19 vaccines, treatments, and testing<\/strong>. Prosecutors say Xu reported directly to officers with China\u2019s Shanghai State Security Bureau (SSSB)<\/strong>, which supervised the intrusions.<\/span><\/p>\n

    On Feb. 19, 2020<\/strong>, Xu allegedly confirmed he had breached a research university in the Southern District of Texas. Days later, an SSSB officer directed him to access email accounts belonging to researchers. Xu later confirmed he had obtained the contents of those mailboxes<\/strong>.<\/span><\/p>\n

    By late 2020, prosecutors say Xu and his co-conspirators shifted to exploiting vulnerabilities in Microsoft Exchange Server<\/strong>, launching attacks tied to the HAFNIUM cyber campaign<\/strong>, which compromised thousands of computers worldwide<\/strong>.<\/span><\/p>\n

    In March 2021<\/strong>, Microsoft<\/span><\/span> publicly disclosed the campaign, prompting emergency patches and mitigation efforts. The Federal Bureau of Investigation<\/span><\/span> and Cybersecurity and Infrastructure Security Agency<\/span><\/span> issued a joint advisory as hundreds of compromised systems remained vulnerable.<\/span><\/p>\n

    Victims allegedly included another Texas university and a global law firm with offices in Washington, D.C. Prosecutors say Xu and his co-conspirators installed web shells<\/strong> to maintain remote access, then searched stolen emails for information tied to U.S. policymakers and government agencies<\/strong>, using terms such as \u201cChinese sources,\u201d \u201cMSS,\u201d and \u201cHong Kong.\u201d<\/span><\/p>\n

    Authorities allege the operation was directed by China\u2019s intelligence services and relied on private contractors to obscure government involvement. This network allegedly cast a wide net, stealing data for intelligence use or resale.<\/span><\/p>\n

    Xu faces multiple federal charges, including wire fraud<\/strong>, computer intrusion<\/strong>, intentional damage to protected computers<\/strong>, and aggravated identity theft<\/strong>, with potential penalties ranging from two to 20 years per count<\/strong>.<\/span><\/p>\n

    Co-defendant Zhang Yu, 44<\/strong>, remains at large.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

    HOUSTON A Chinese national extradited to the United States this weekend made his initial court appearance Monday in federal court in Houston, facing alleged charges tied to a global hacking campaign that…<\/p>\n","protected":false},"author":1,"featured_media":14226,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-60836","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"yoast_head":"\nChinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm<\/title>\n<meta name=\"description\" content=\"Xu Zewei faces federal charges in Houston for hacking U.S. universities, COVID-19 researchers, and Microsoft Exchange systems in the HAFNIUM campaign.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cjnotebook.com\/?p=60836\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Chinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm\" \/>\n<meta property=\"og:description\" content=\"Xu Zewei faces federal charges in Houston for hacking U.S. universities, COVID-19 researchers, and Microsoft Exchange systems in the HAFNIUM campaign.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cjnotebook.com\/?p=60836\" \/>\n<meta property=\"og:site_name\" content=\"American Justice Notebook\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/AmericanJusticeNotebook\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-27T22:10:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-27T22:11:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cjnotebook.com\/wp-content\/uploads\/2015\/08\/Espionage-FBI.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"500\" \/>\n\t<meta property=\"og:image:height\" content=\"333\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Raul\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Raul\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836\"},\"author\":{\"name\":\"Raul\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#\\\/schema\\\/person\\\/f5521baddca77b521f012298775186c0\"},\"headline\":\"Chinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm\",\"datePublished\":\"2026-04-27T22:10:19+00:00\",\"dateModified\":\"2026-04-27T22:11:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836\"},\"wordCount\":563,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Espionage-FBI.jpg\",\"articleSection\":[\"American Justice\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/cjnotebook.com\\\/?p=60836#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836\",\"name\":\"Chinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Espionage-FBI.jpg\",\"datePublished\":\"2026-04-27T22:10:19+00:00\",\"dateModified\":\"2026-04-27T22:11:50+00:00\",\"description\":\"Xu Zewei faces federal charges in Houston for hacking U.S. universities, COVID-19 researchers, and Microsoft Exchange systems in the HAFNIUM campaign.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cjnotebook.com\\\/?p=60836\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/?p=60836#primaryimage\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Espionage-FBI.jpg\",\"contentUrl\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Espionage-FBI.jpg\",\"width\":500,\"height\":333},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#website\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/\",\"name\":\"American Justice Notebook\",\"description\":\""Our liberty depends on the freedom of the press, and that cannot be limited without being lost." \u2014 Thomas Jefferson\",\"publisher\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cjnotebook.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#organization\",\"name\":\"American Justice Notebook\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/Justice-Scales.jpg\",\"contentUrl\":\"https:\\\/\\\/cjnotebook.com\\\/wp-content\\\/uploads\\\/2014\\\/07\\\/Justice-Scales.jpg\",\"width\":675,\"height\":231,\"caption\":\"American Justice Notebook\"},\"image\":{\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/AmericanJusticeNotebook\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cjnotebook.com\\\/#\\\/schema\\\/person\\\/f5521baddca77b521f012298775186c0\",\"name\":\"Raul\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g\",\"caption\":\"Raul\"},\"description\":\"Raul Hernandez is a former journalist. He has worked as a newspaper reporter for more than 30 years at the El Paso Herald-Post, El Paso Times, Press Enterprise in Riverside, California and the Ventura County Star in California. He was a court reporter for more than 20 years.\",\"sameAs\":[\"https:\\\/\\\/cjnotebook.com\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Chinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm","description":"Xu Zewei faces federal charges in Houston for hacking U.S. universities, COVID-19 researchers, and Microsoft Exchange systems in the HAFNIUM campaign.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cjnotebook.com\/?p=60836","og_locale":"en_US","og_type":"article","og_title":"Chinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm","og_description":"Xu Zewei faces federal charges in Houston for hacking U.S. universities, COVID-19 researchers, and Microsoft Exchange systems in the HAFNIUM campaign.","og_url":"https:\/\/cjnotebook.com\/?p=60836","og_site_name":"American Justice Notebook","article_publisher":"https:\/\/www.facebook.com\/AmericanJusticeNotebook","article_published_time":"2026-04-27T22:10:19+00:00","article_modified_time":"2026-04-27T22:11:50+00:00","og_image":[{"width":500,"height":333,"url":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2015\/08\/Espionage-FBI.jpg","type":"image\/jpeg"}],"author":"Raul","twitter_misc":{"Written by":"Raul","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cjnotebook.com\/?p=60836#article","isPartOf":{"@id":"https:\/\/cjnotebook.com\/?p=60836"},"author":{"name":"Raul","@id":"https:\/\/cjnotebook.com\/#\/schema\/person\/f5521baddca77b521f012298775186c0"},"headline":"Chinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm","datePublished":"2026-04-27T22:10:19+00:00","dateModified":"2026-04-27T22:11:50+00:00","mainEntityOfPage":{"@id":"https:\/\/cjnotebook.com\/?p=60836"},"wordCount":563,"commentCount":0,"publisher":{"@id":"https:\/\/cjnotebook.com\/#organization"},"image":{"@id":"https:\/\/cjnotebook.com\/?p=60836#primaryimage"},"thumbnailUrl":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2015\/08\/Espionage-FBI.jpg","articleSection":["American Justice"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cjnotebook.com\/?p=60836#respond"]}]},{"@type":"WebPage","@id":"https:\/\/cjnotebook.com\/?p=60836","url":"https:\/\/cjnotebook.com\/?p=60836","name":"Chinese Hacker Extradited in HAFNIUM Case Targeting U.S. COVID-19 Research, Law Firm","isPartOf":{"@id":"https:\/\/cjnotebook.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cjnotebook.com\/?p=60836#primaryimage"},"image":{"@id":"https:\/\/cjnotebook.com\/?p=60836#primaryimage"},"thumbnailUrl":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2015\/08\/Espionage-FBI.jpg","datePublished":"2026-04-27T22:10:19+00:00","dateModified":"2026-04-27T22:11:50+00:00","description":"Xu Zewei faces federal charges in Houston for hacking U.S. universities, COVID-19 researchers, and Microsoft Exchange systems in the HAFNIUM campaign.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cjnotebook.com\/?p=60836"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cjnotebook.com\/?p=60836#primaryimage","url":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2015\/08\/Espionage-FBI.jpg","contentUrl":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2015\/08\/Espionage-FBI.jpg","width":500,"height":333},{"@type":"WebSite","@id":"https:\/\/cjnotebook.com\/#website","url":"https:\/\/cjnotebook.com\/","name":"American Justice Notebook","description":""Our liberty depends on the freedom of the press, and that cannot be limited without being lost." \u2014 Thomas Jefferson","publisher":{"@id":"https:\/\/cjnotebook.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cjnotebook.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cjnotebook.com\/#organization","name":"American Justice Notebook","url":"https:\/\/cjnotebook.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cjnotebook.com\/#\/schema\/logo\/image\/","url":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2014\/07\/Justice-Scales.jpg","contentUrl":"https:\/\/cjnotebook.com\/wp-content\/uploads\/2014\/07\/Justice-Scales.jpg","width":675,"height":231,"caption":"American Justice Notebook"},"image":{"@id":"https:\/\/cjnotebook.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/AmericanJusticeNotebook"]},{"@type":"Person","@id":"https:\/\/cjnotebook.com\/#\/schema\/person\/f5521baddca77b521f012298775186c0","name":"Raul","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c7f80bd073aca2abc2fc18e390e13d00b72d9d3a81bca4fd53e3567b02efee6f?s=96&r=g","caption":"Raul"},"description":"Raul Hernandez is a former journalist. He has worked as a newspaper reporter for more than 30 years at the El Paso Herald-Post, El Paso Times, Press Enterprise in Riverside, California and the Ventura County Star in California. He was a court reporter for more than 20 years.","sameAs":["https:\/\/cjnotebook.com\/"]}]}},"_links":{"self":[{"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/posts\/60836","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=60836"}],"version-history":[{"count":1,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/posts\/60836\/revisions"}],"predecessor-version":[{"id":60837,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/posts\/60836\/revisions\/60837"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=\/wp\/v2\/media\/14226"}],"wp:attachment":[{"href":"https:\/\/cjnotebook.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=60836"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=60836"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cjnotebook.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=60836"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}