Find notable cyber news and cases, enriched with sources, timelines, and signals.

Xu Zewei extradited for U.S. cyberespionage prosecution

Law Enforcement
First reported
Last updated
Happening score
H score 37
2 unique sources, 2 articles

Summary

Hide ▲

Xu Zewei was extradited from Italy to the United States to face criminal charges in a cyberespionage case tied to China's MSS. The move expands the legal exposure around alleged intrusions attributed to Silk Typhoon/Hafnium and the broader intelligence-gathering operation. It also puts the alleged hacker before U.S. federal court on multiple computer-intrusion and conspiracy counts.

Related Happenings

Interpol Operation Ramz cybercrime crackdown in MENA

Law Enforcement
First: 18.05.2026 17:00 Last: 18.05.2026 17:00 Sources 1

About this happening: **INTERPOL**'s **Operation Ramz** led to **more than 200 arrests** across the **Middle East and North Africa**, with law enforcement also identifying **382 additional suspects** i...

SHADOW-EARTH-053 China-aligned espionage campaign against Asian government and defense targets

Campaign
First: 01.05.2026 17:02 Last: 01.05.2026 17:02 Sources 1

About this happening: **SHADOW-EARTH-053** is running an active **China-aligned espionage campaign** against **government and defense** targets across **South, East, and Southeast Asia** and **Poland**...

Finnish arrest and U.S. charges in Bouquet Scattered Spider case

Law Enforcement
First: 28.04.2026 18:39 Last: 28.04.2026 18:39 Sources 1

About this happening: **Finnish law enforcement** arrested **Bouquet**, and **U.S. federal prosecutors** later charged him in a cross-border **Scattered Spider** cybercrime case. The charges include **...

Silk Typhoon / Hafnium coordinated intelligence-gathering campaign

Campaign
First: 27.04.2026 22:56 Last: 27.04.2026 22:56 Sources 1

How related: According to a DOJ announcement, Xu Zewei is alleged to be a contract hacker for China's Ministry of State Security (MSS) who conducted breaches between February 2020 and June 2021 as part of a coordinated intelligence-gathering campaign.

About this happening: The **Silk Typhoon / Hafnium** operation is tied to a **coordinated intelligence-gathering campaign** spanning **February 2020 to June 2021**, underscoring a sustained espionage e...

Latest development: 28.04.2026 15:30

US officials described Silk Typhoon/Hafnium activity from February 2020 to June 2021 as a coordinated intelligence-gathering campaign that targeted US universities and COVID-19 researchers, including a Texas university network, and later expanded into Microsoft Exchange Server vulnerability exploitation. The operation reportedly used stolen mailbox access to search for vaccines, treatments, and testing research, and the FBI said the campaign affected more than 12,700 US organizations.

DoJ/FBI/USSS crypto-fraud domain seizure and charges

Law Enforcement
First: 27.04.2026 18:00 Last: 27.04.2026 18:00 Sources 1

About this happening: **DoJ**, **FBI**, and **US Secret Service** investigators **seized 503 domains** linked to **fraudulent crypto platforms**, disrupting infrastructure used in a Cambodia-based scam...

Timeline

  1. 27.04.2026 22:56 2 articles · 29d ago

    Xu Zewei extradited to the United States for cyberespionage prosecution

    Legal Policy Action Update

    Xu Zewei is extradited from Italy to the United States to face criminal charges tied to alleged Silk Typhoon/Hafnium cyberespionage, including MSS-directed intrusions, Microsoft Exchange Server zero-day exploitation, and attacks targeting COVID-19 research organizations.

    Show sources