A Chinese national accused of carrying out widespread cyber intrusions targeting US companies and universities has been extradited to the United States and presented before a federal court in Houston.
Xu Zewei faces a nine-count indictment linked to hacking activities carried out between February 2020 and June 2021. Prosecutors allege that some of these intrusions were part of the “HAFNIUM” cyber campaign, which compromised thousands of computer systems globally, including in the US.
According to court documents, Xu acted under the direction of China’s Ministry of State Security (MSS), specifically its Shanghai State Security Bureau (SSSB). He allegedly worked for Shanghai-based firm Powerock Network, described by investigators as one of several companies enabling state-sponsored hacking operations.
Authorities claim Xu and his associates targeted sensitive COVID-19 research at the height of the pandemic, including work by US-based universities, immunologists, and virologists. In one instance, he reportedly accessed a university network in Texas and extracted email data from researchers studying vaccines and treatments.
The indictment further alleges that Xu played a role in exploiting vulnerabilities in Microsoft Exchange Server software, a key element of the HAFNIUM campaign disclosed publicly in 2021. These attacks enabled hackers to install “web shells” on compromised systems, allowing continued remote access and data theft. Victims included academic institutions and a global law firm.
US officials said the operation reflects a broader strategy in which Chinese intelligence agencies use private contractors to obscure direct government involvement in cyber espionage. Investigators claim such networks often exploit vulnerabilities at scale, collecting vast amounts of data—some of which is later sold or shared.
Xu has been charged with multiple offences, including wire fraud, unauthorized access to protected computers, and identity theft. If convicted, he could face significant prison time. His alleged co-conspirator, Zhang Yu, remains at large.
