Twelve Chinese nationals have been accused by US authorities for allegedly participating in a hacking conspiracy that sold the Chinese government the data of dissidents living in the US.
The Justice Department (DOJ) said the “state-sponsored” operation also targeted federal agencies, including the Treasury.
According to the statement, hackers also allegedly targeted a Hong Kong newspaper and an American religious organization.
China has vehemently disputed previous accusations but has not addressed these particular ones.
The Treasury Department revealed in December that Chinese-sponsored hackers had gained access to employee workstations and certain unclassified data in a “major” intrusion.
China denied any involvement at the time, claiming that it “consistently opposes all forms of hacking” and that the accusation was “baseless”.
The most recent DOJ charges were unsealed in a Manhattan federal court on Wednesday, though it is unclear when they were issued.
Who is being accused?
Two officials from China’s Ministry of Public Security were among those indicted.
According to the DOJ, Chinese authorities were charged between $10,000 and $75,000 for each “exploited” email mailbox by hackers who seemed to be representing a private company called i-Soon.
They were “paid handsomely for stolen data” and allegedly “conducted computer intrusions” both independently and under the supervision of Chinese departments.
“Today, we are exposing the Chinese government agents directing and fostering indiscriminate and reckless attacks against computers and networks worldwide,” said Sue J. Bai, the head of the National Security Division of the Department of Justice.
“We will continue to fight to dismantle this ecosystem of cyber mercenaries and protect our national security,” she stated.
Who was the target?
The targeted US-based dissidents were not given any additional information.
“Previously sent missionaries to China and was openly critical of the PRC government” is how the hackers described the religious organization they targeted. The People’s Republic of China is abbreviated as PRC.
The list also included a newspaper from Hong Kong. The message said that it was “considered as being opposed to the PRC government” but did not name it.
Hackers reportedly targeted the foreign ministries of Taiwan, India, South Korea, and Indonesia in addition to US organizations.
The FBI and the Cybersecurity and Infrastructure Security Agency claimed in October of last year that “actors affiliated with the People’s Republic of China” were responsible for hacking attacks against two significant US presidential campaigns.
Seven Chinese nationals were accused earlier last year of overseeing a cyber campaign that targeted international critics of China and lasted for at least 14 years.
The UK and New Zealand parliaments, as well as the UK Electoral Commission, have been the targets of operations that Western governments have connected to China.
