US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
The US offers up to $10 million for alleged Hafnium hacker Zhang Yu, still at large.
62
Organization
Ministry of State Security
- Mentions · 7d0
- Mentions · 30d8
- All mentions15
- First seenAug 26, 2026
- Last mentioned22d ago
Timeline
15 articles · newest firstU.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu
The United States offered $10 million for Zhang Yu, accused of helping run the HAFNIUM Exchange intrusions.
63
U.S. Offers $10 Million Reward for Chinese Hacker Behind Alleged COVID-19 Research Cyberattacks
The U.S. offers up to $10 million for information on Zhang Yu, accused of COVID-19 research cyberattacks.
64
U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research
The U.S. offers up to $10 million for Zhang Yu, accused of MSS-directed theft of COVID-19 research.
66
US posts $10 million reward for accused Chinese ‘Hafnium’ hacker
The US offers $10 million for Zhang Yu, accused of leading Hafnium intrusions for China.
64
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
MI5 says China's MSS used front company CGTRI to fund research involving more than 100 UK-linked academics.
76
MI5 warns UK academics their research may have helped Chinese spies
MI5 warned 100+ UK academics that China's CGTRI, tied to MSS, funded their research to boost Chinese espionage capabilities.
58
MI5 Warns Over 100 Academics Helped China's Espionage Plans
MI5 warned that over 100 UK-linked academics unknowingly aided MSS espionage via projects funded through China's CGTRI/CAGT front organization.
58
China spy chief points at US AI models in cyber threat warning
China's MSS chief Chen Yixin named Anthropic's Claude Mythos and OpenAI's GPT-5.5-Cyber as cyber threats to Chinese critical infrastructure.
55
Multiple Chinese hacking groups seen using identical Chrome zero-day exploit
Four China-linked espionage groups share identical BlueMoon Chrome zero-day exploit kit targeting US defense contractors and Asian government agencies.
85
Srsly Risky Biz: China's Private Sector Botnets Are Worth Disrupting
DoJ seized domains of Chinese espionage botnet platforms QScan and QTRouter, run by private firm QTFY for MSS and PLA targeting.
76
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
FBI and Lumen disrupted QTFY's QScan and QTRouter botnet platforms used by Chinese state-sponsored hackers to conceal intrusions into U.S. agencies.
78
DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims
DoJ corrected its statement to say US federal agencies were targets, not confirmed victims, of China-linked group QTFY's intrusions.
70
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure
FBI seizes China-linked QScan and QTRouter hacking platforms used by QTFY to obfuscate intrusions against US federal agencies.
78
US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate
DOJ takes down QScan and QTRouter Chinese obfuscation platforms used to breach Federal Reserve, DOE, DOJ, and Senate since 2018.
76
Related CVEs
by mentions- CVE-2021-44228100%10.0JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
- CVE-2020-5902100%9.8Unauthenticated RCE via path traversal in F5 BIG-IP TMUI
- CVE-2025-31161100%9.8Authentication Bypass in CrushFTP File Transfer Servers (CVE-2025-31161)
- CVE-2018-13379100%9.8Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN
- CVE-2021-26855100%9.1Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)
- CVE-2024-896399%9.1Unauthenticated Path Traversal in Ivanti Cloud Services Appliance
- CVE-2024-24919100%8.6Information Disclosure in Internet-Facing Check Point Quantum Security Gateways
- CVE-2024-938058%7.2OS Command Injection RCE in Ivanti Cloud Services Appliance Admin Console
- CVE-2024-819089%7.2OS Command Injection RCE in Ivanti Cloud Services Appliance 4.6
Appears with
- FBIorganization · 6
- Microsoftvendor · 6
- Shanghai State Security Bureauorganization · 5
- Hafniumthreat actor · 5
- Zhang Yuthreat actor · 4
- QTFYthreat actor · 4
- NASAvictim · 4
- Xu Zeweithreat actor · 4
- Federal Bureau of Investigationorganization · 4
- Microsoft Exchange Serverproduct · 4
- QTRouterproduct · 3
- China General Technology Research Instituteorganization · 3
- QScanproduct · 3
- Department of Justicevictim · 3
- Shanghai Firetechorganization · 3
- Rewards for Justiceorganization · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.