U.S. charges two Chinese nationals in coronavirus vaccine hacking scheme, other crimes

“In at least one instance, the hackers sought to extort cryptocurrency from a victim entity, by threatening to release the victim’s stolen source code on the Internet. More recently, the defendants probed for vulnerabilities in computer networks of companies developing Covid-19 vaccines, testing technology, and treatments,” the DOJ statement said.

The news comes amid a global race to create a vaccine for the coronavirus, which originated in China late last year before spreading across the globe, infecting millions. More than 140,000 people have died from the virus in the United States, according to a tally from Johns Hopkins University.

“China has now taken its place, alongside Russia, Iran and North Korea, in that shameful club of nations that provide a safe haven for cybercriminals in exchange for those criminals being ‘on-call’ to work for the benefit of the state, here to feed the Chinese Communist party’s insatiable hunger for American and other non-Chinese companies’ hard-earned intellectual property, including Covid-19 research,” John Demers, assistant attorney general for national security, said Tuesday.

In order to conceal their efforts, the DOJ alleges, the hackers packaged victim data in encrypted Roshal Archive compressed files; changed the names of the files, victim documents and system time stamps; and concealed programs and documents. The defendants revictimized companies, government entities, and organizations from which they had previously stolen data.

The defendants are each charged with:

• one count of conspiracy to commit computer fraud, which carries a maximum sentence of five years in prison,
• one count of conspiracy to commit theft of trade secrets, which carries a maximum sentence of 10 years in prison,
• one count of conspiracy to commit wire fraud, which carries a maximum sentence of 20 years in prison,
• one count of unauthorized access of a computer, which carries a maximum sentence of five years in prison, and
• seven counts of aggravated identity theft, which each carries a mandatory sentence of two non-consecutive years in prison.

The Chinese Embassy in Washington did not immediately respond to CNBC’s request for comment.

The latest revelation comes on the heels of a string of speeches made by Trump administration officials blasting China’s use of espionage and cyberattacks to steal intellectual property from American businesses. In blistering remarks earlier this month, FBI Director Chris Wray said Chinese tactics have created “one of the largest transfers of wealth in human history.”

U.S. officials have long complained that Chinese intellectual property theft has cost the economy billions of dollars in revenue and thousands of jobs and that it threatens national security. Beijing maintains that it does not engage in intellectual property theft.

Article source: https://www.cnbc.com/2020/07/21/us-charges-chinese-nationals-for-coronavirus-vaccine-hacking-scheme-other-crimes.html