US offers US$10 million reward for wanted Chinese hacker
The United States offered a US$10 million reward on Tuesday (Dec 10) for information leading to the arrest of a Chinese man and co-conspirators wanted for hacking computer firewalls.
The US announced a $10 million reward for Guan Tianfeng, a Chinese hacker accused of exploiting firewall vulnerabilities, impacting 81,000 devices globally. Over 23,000 affected were in the US, including critical infrastructure. Guan allegedly worked with Sichuan Silence, now sanctioned.
Guan Tianfeng, 30, is believed to be living in China's Sichuan province, according to the US State Department.
An indictment charging Guan with conspiracy to commit computer fraud and conspiracy to commit wire fraud was unsealed on Tuesday. The US Treasury Department said it had imposed sanctions
"The defendant and his co-conspirators exploited a vulnerability in tens of thousands of network security devices, infecting them with malware designed to steal information from victims around the world," US Deputy Attorney General Lisa Monaco said in a statement.
About 81,000 firewall devices were simultaneously attacked worldwide in April 2020, the indictment said, with the aim of stealing data, including usernames and passwords, while also attempting to infect the computers with ransomware.
More than 23,000 firewalls were in the United States, of which 36 were protecting "critical infrastructure companies' systems", the Treasury said.
"The zero-day vulnerability Guan Tianfeng and his co-conspirators found and exploited affected firewalls owned by businesses across the United States," Federal Bureau of Investigation agent Herbert Stapleton said.
"If Sophos had not rapidly identified the vulnerability and deployed a comprehensive response, the damage could have been far more severe."
According to the indictment, Sichuan Silence sold its services and the data it obtained through hacking to Chinese businesses and to government entities, including the Ministry of Public Security.
A man who answered a call to a phone number registered with Sichuan Silence said the company "did not accept interviews" and declined to comment on the sanctions.
The man, who did not identify himself when asked by AFP, also said Guan was "uncontactable".
Source: www.channelnewsasia.com
