The U.S. Department of Justice has charged 12 Chinese individuals in connection with a state-backed hacking scheme focusing on data theft and suppression of dissent. This operation involved agents from the Ministry of Public Security and personnel from i-Soon, a private cybersecurity company. The DoJ has seized domains linked to these activities and offered significant rewards for information on related cybercrimes.

The United States Department of Justice has formally charged 12 Chinese nationals purportedly involved in an extensive scheme aimed at stealing sensitive data and stifling dissent globally. The accused include two officials from the People’s Republic of China’s Ministry of Public Security and eight employees of Anxun Information Technology Co. Ltd., commonly referred to as i-Soon, alongside members of the group Advanced Persistent Threat 27 (APT27).

These individuals engaged in unauthorized computer intrusions under the direction of the Chinese Ministry of Public Security and the Ministry of State Security. According to the DoJ, they profited from stolen data, with reports indicating that substantial payments were made to these actors for their services. The operations reportedly took place from 2016 to 2023, targeting numerous organizations.

Notably, the FBI noted that activities associated with i-Soon are tagged within the cybersecurity community under various names, indicating a broad spectrum of cyber threats. The Chinese government is believed to cultivate relationships with freelance hackers and companies to infiltrate computer networks globally.

The U.S. has announced a reward of up to $10 million for information leading to the identification of individuals involved in cyber activities against U.S. infrastructure. The DoJ also identified i-Soon as a significant entity in the PRC’s hacker-for-hire sector, allegedly making millions from their exploits, charging between $10,000 and $75,000 per compromised email account.

i-Soon’s attacks targeted various entities, including a major religious organization in the U.S., critics of the PRC government, and multiple government agencies. Additionally, a $2 million reward was offered for information related to two individuals accused of extensive hacking campaigns aimed at U.S. entities, utilizing sophisticated malware.

In conjunction with the charges, the DoJ has confiscated domains linked to i-Soon and affiliated actors. The Justice Department emphasized that the targets were under scrutiny by the PRC government due to their critical stance on the regime, leading to a variety of cyber intrusions.

i-Soon is alleged to have trained personnel from the Ministry of Public Security in hacking techniques and sold advanced tools designed for cyber intrusions. These tools included phishing software and a password-cracking platform, allowing hackers to breach social media accounts and monitor public opinion beyond the borders of China.

The recent charges against 12 Chinese nationals by the U.S. Department of Justice highlight the extensive and coordinated efforts of state-backed hacking operations aimed at silencing dissent and stealing sensitive data. The operations conducted by i-Soon and its associates underline the significant concerns regarding cybersecurity and international espionage emanating from China. The U.S. government’s response includes substantial monetary rewards for information on these cyber activities, reflecting a commitment to address significant cybersecurity threats.

Original Source: thehackernews.com

Related posts:

CrowdStrike Reports Significant Rise in Chinese Cyber Threats and Espionage Trump Compares UK Data Access Demands to Chinese Monitoring Practices Evaluating the National Security Risks of TikTok: A Supreme Court Dilemma Japanese Firms Ban China’s DeepSeek AI Over Data Security Risks