US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
Government
Zhang Yu was charged alongside Xu Zewei, who was extradited from Italy to the US in April 2026.
The US Department of State is offering up to $10 million for information on Zhang Yu, a Chinese national accused of taking part in the Hafnium campaign against Microsoft Exchange servers.
The State Department’s Rewards for Justice (RFJ) program announced the reward on Wednesday. Zhang is charged alongside Xu Zewei, who was extradited from Italy to the US in April 2026.
According to RFJ, Zhang is a director at Shanghai Firetech Information Science and Technology Company. He allegedly worked on behalf of the Shanghai State Security Bureau (SSSB), part of China’s Ministry of State Security (MSS).
Zhang and Xu were named in a nine-count indictmentunsealed in July 2025, days after Italian police arrested Xu in Milan at the request of the US. Xu has since appeared in federal court...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE