US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
The US offers up to $10 million for alleged Hafnium hacker Zhang Yu, still at large.
The US State Department’s Rewards for Justice program is offering up to $10 million for information on Zhang Yu, a Chinese national accused of participating in the Hafnium campaign against Microsoft Exchange. Zhang, described as a director at Shanghai Firetech, and Xu Zewei were charged in a nine-count indictment unsealed in July 2025; Xu was extradited from Italy in April 2026. Authorities say they stole US COVID-19 research in 2020 and later exploited Exchange flaws, with the FBI stating the campaign compromised more than 12,700 US organizations. Microsoft tracks Hafnium as Silk Typhoon.
62