NZ Herald
  • Home
  • Latest news
  • Herald NOW
  • Video
  • New Zealand
  • Sport
  • World
  • Business
  • Entertainment
  • Podcasts
  • Quizzes
  • Opinion
  • Lifestyle
  • Travel
  • Viva
  • Weather

Subscriptions

  • Herald Premium
  • Viva Premium
  • The Listener
  • BusinessDesk

Sections

  • Latest news
  • New Zealand
    • All New Zealand
    • Crime
    • Politics
    • Education
    • Open Justice
    • Scam Update
  • Herald NOW
  • On The Up
  • World
    • All World
    • Australia
    • Asia
    • UK
    • United States
    • Middle East
    • Europe
    • Pacific
  • Business
    • All Business
    • MarketsSharesCurrencyCommoditiesStock TakesCrypto
    • Markets with Madison
    • Media Insider
    • Business analysis
    • Personal financeKiwiSaverInterest ratesTaxInvestment
    • EconomyInflationGDPOfficial cash rateEmployment
    • Small business
    • Business reportsMood of the BoardroomProject AucklandSustainable business and financeCapital markets reportAgribusiness reportInfrastructure reportDynamic business
    • Deloitte Top 200 Awards
    • CompaniesAged CareAgribusinessAirlinesBanking and financeConstructionEnergyFreight and logisticsHealthcareManufacturingMedia and MarketingRetailTelecommunicationsTourism
  • Opinion
    • All Opinion
    • Analysis
    • Editorials
    • Business analysis
    • Premium opinion
    • Letters to the editor
  • Politics
  • Sport
    • All Sport
    • OlympicsParalympics
    • RugbySuper RugbyNPCAll BlacksBlack FernsRugby sevensSchool rugby
    • CricketBlack CapsWhite Ferns
    • Racing
    • NetballSilver Ferns
    • LeagueWarriorsNRL
    • FootballWellington PhoenixAuckland FCAll WhitesFootball FernsEnglish Premier League
    • GolfNZ Open
    • MotorsportFormula 1
    • Boxing
    • UFC
    • BasketballNBABreakersTall BlacksTall Ferns
    • Tennis
    • Cycling
    • Athletics
    • SailingAmerica's CupSailGP
    • Rowing
  • Lifestyle
    • All Lifestyle
    • Viva - Food, fashion & beauty
    • Society Insider
    • Royals
    • Sex & relationships
    • Food & drinkRecipesRecipe collectionsRestaurant reviewsRestaurant bookings
    • Health & wellbeing
    • Fashion & beauty
    • Pets & animals
    • The Selection - Shop the trendsShop fashionShop beautyShop entertainmentShop giftsShop home & living
    • Milford's Investing Place
  • Entertainment
    • All Entertainment
    • TV
    • MoviesMovie reviews
    • MusicMusic reviews
    • BooksBook reviews
    • Culture
    • ReviewsBook reviewsMovie reviewsMusic reviewsRestaurant reviews
  • Travel
    • All Travel
    • News
    • New ZealandNorthlandAucklandWellingtonCanterburyOtago / QueenstownNelson-TasmanBest NZ beaches
    • International travelAustraliaPacific IslandsEuropeUKUSAAfricaAsia
    • Rail holidays
    • Cruise holidays
    • Ski holidays
    • Luxury travel
    • Adventure travel
  • Kāhu Māori news
  • Environment
    • All Environment
    • Our Green Future
  • Talanoa Pacific news
  • Property
    • All Property
    • Property Insider
    • Interest rates tracker
    • Residential property listings
    • Commercial property listings
  • Health
  • Technology
    • All Technology
    • AI
    • Social media
  • Rural
    • All Rural
    • Dairy farming
    • Sheep & beef farming
    • Horticulture
    • Animal health
    • Rural business
    • Rural life
    • Rural technology
    • Opinion
    • Audio & podcasts
  • Weather forecasts
    • All Weather forecasts
    • Kaitaia
    • Whangārei
    • Dargaville
    • Auckland
    • Thames
    • Tauranga
    • Hamilton
    • Whakatāne
    • Rotorua
    • Tokoroa
    • Te Kuiti
    • Taumaranui
    • Taupō
    • Gisborne
    • New Plymouth
    • Napier
    • Hastings
    • Dannevirke
    • Whanganui
    • Palmerston North
    • Levin
    • Paraparaumu
    • Masterton
    • Wellington
    • Motueka
    • Nelson
    • Blenheim
    • Westport
    • Reefton
    • Kaikōura
    • Greymouth
    • Hokitika
    • Christchurch
    • Ashburton
    • Timaru
    • Wānaka
    • Oamaru
    • Queenstown
    • Dunedin
    • Gore
    • Invercargill
  • Meet the journalists
  • Promotions & competitions
  • OneRoof property listings
  • Driven car news

Puzzles & Quizzes

  • Puzzles
    • All Puzzles
    • Sudoku
    • Code Cracker
    • Crosswords
    • Cryptic crossword
    • Wordsearch
  • Quizzes
    • All Quizzes
    • Morning quiz
    • Afternoon quiz
    • Sports quiz

Regions

  • Northland
    • All Northland
    • Far North
    • Kaitaia
    • Kerikeri
    • Kaikohe
    • Bay of Islands
    • Whangarei
    • Dargaville
    • Kaipara
    • Mangawhai
  • Auckland
  • Waikato
    • All Waikato
    • Hamilton
    • Coromandel & Hauraki
    • Matamata & Piako
    • Cambridge
    • Te Awamutu
    • Tokoroa & South Waikato
    • Taupō & Tūrangi
  • Bay of Plenty
    • All Bay of Plenty
    • Katikati
    • Tauranga
    • Mount Maunganui
    • Pāpāmoa
    • Te Puke
    • Whakatāne
  • Rotorua
  • Hawke's Bay
    • All Hawke's Bay
    • Napier
    • Hastings
    • Havelock North
    • Central Hawke's Bay
    • Wairoa
  • Taranaki
    • All Taranaki
    • Stratford
    • New Plymouth
    • Hāwera
  • Manawatū - Whanganui
    • All Manawatū - Whanganui
    • Whanganui
    • Palmerston North
    • Manawatū
    • Tararua
    • Horowhenua
  • Wellington
    • All Wellington
    • Kapiti
    • Wairarapa
    • Upper Hutt
    • Lower Hutt
  • Nelson & Tasman
    • All Nelson & Tasman
    • Motueka
    • Nelson
    • Tasman
  • Marlborough
  • West Coast
  • Canterbury
    • All Canterbury
    • Kaikōura
    • Christchurch
    • Ashburton
    • Timaru
  • Otago
    • All Otago
    • Oamaru
    • Dunedin
    • Balclutha
    • Alexandra
    • Queenstown
    • Wanaka
  • Southland
    • All Southland
    • Invercargill
    • Gore
    • Stewart Island
  • Gisborne

Media

  • Video
    • All Video
    • NZ news video
    • Herald NOW
    • Business news video
    • Politics news video
    • Sport video
    • World news video
    • Lifestyle video
    • Entertainment video
    • Travel video
    • Markets with Madison
    • Kea Kids news
  • Podcasts
    • All Podcasts
    • The Front Page
    • On the Tiles
    • Ask me Anything
    • The Little Things
  • Cartoons
  • Photo galleries
  • Today's Paper - E-editions
  • Photo sales
  • Classifieds

NZME Network

  • Advertise with NZME
  • OneRoof
  • Driven Car Guide
  • BusinessDesk
  • Newstalk ZB
  • Sunlive
  • ZM
  • The Hits
  • Coast
  • Radio Hauraki
  • The Alternative Commentary Collective
  • Gold
  • Flava
  • iHeart Radio
  • Hokonui
  • Radio Wanaka
  • iHeartCountry New Zealand
  • Restaurant Hub
  • NZME Events

SubscribeSign In
Advertisement
Advertise with NZME.
Home / World

US government release images of seven hackers working for China

By Tony Diver, James Titcomb
Daily Telegraph UK·
25 Mar, 2024 08:36 PM4 mins to read

Subscribe to listen

Access to Herald Premium articles require a Premium subscription. Subscribe now to listen.
Already a subscriber?  Sign in here

Listening to articles is free for open-access content—explore other articles or learn more about text-to-speech.
‌
Save

    Share this article

Chris Luxon is talking to media after China-backed hackers got into Parliament's network.

The US government has released images of seven alleged Chinese hackers wanted on charges of infiltrating the communications of targets in Britain and America over a 14-year period.

The Department of Justice (DoJ) accused the men of participating in a state-sponsored hacking ring, known to US authorities as APT 31 or by the codename “Violet Typhoon”.

The documents lay bare the scale of China’s illicit incursion into Western public life, through the use of malicious emails designed to harvest data on their targets.

The defendants, two of whom have also been sanctioned by the US Treasury, are: Ni Gaobin, Weng Ming, Cheng Feng, Peng Yaowen, Sun Xiaohui, Xiong Wang and Zhao Guangzong.

Read More

  • Cyber attacks: Govt courageous to call out China's ...
  • NZ net users fall victim to China-US cyber war - NZ ...
  • Chinese cyber attack on Australia exposed...
  • Andrew Little says Chinese hacking claims were corroborated, ...
Advertisement
Advertise with NZME.
Advertisement
Advertise with NZME.

The men, aged between 34 and 38, are connected to Wuhan Xiaoruizhi Science & Technology, a front company operated by an arm of the Ministry of State Security, the Chinese foreign intelligence agency.

Since 2010, the unit has been tasked with what US government officials called a “sinister scheme” of “computer intrusion activities” on behalf of the Chinese government, mainly through email attacks on foreign targets.

The hit list included US government departments, White House staff, China-sceptic British MPs and the UK’s Electoral Commission.

The list also included members of Congress, including both Democrat and Republican senators, the United States Naval Academy and the United States Naval War College’s China Maritime Studies Institute.

Advertisement
Advertise with NZME.

The targets were selected “in furtherance of the PRC’s economic espionage and foreign intelligence objectives” of gathering information about potential threats abroad, and in violation of data privacy and computer misuse laws.

Over a 14-year period, the hackers and Chinese intelligence operatives compromised the security of thousands of work and personal email addresses, cloud storage accounts and telephone call records, the DoJ said.

The group operated by sending more than 10,000 emails to their targets, disguised as legitimate messages from journalists or news organisations and containing real news articles that were relevant to the recipient.

Top left to right: Ni Gaobin, Weng Ming and Cheng Feng. Bottom left to right: Peng Yaowen, Sun Xiaohui, Xiong Wang and Zhao Guangzong.
Top left to right: Ni Gaobin, Weng Ming and Cheng Feng. Bottom left to right: Peng Yaowen, Sun Xiaohui, Xiong Wang and Zhao Guangzong.

Once opened, however, a hidden tracking link in the email would harvest the user’s location, IP address and device information and transmit it back to Wuhan for processing by the Chinese intelligence services.

Using that information, APT 31 was able to access the email accounts and networks of the targets using so-called “zero day exploits” – the manipulation of security bugs that manufacturers have not yet patched with software updates.

In 2021, the group began to hack the email accounts of British MPs connected to IPAC, the Inter-Parliamentary Alliance on China, after the group began publicly criticising China and the Chinese Communist Party.

The hackers created 10 email accounts to send more than 1000 emails to 400 people connected to IPAC, and received data back from the accounts of their targets.

The targets included 43 parliamentary accounts and every member of IPAC in the EU.

Joint sanctions

The US and UK have announced joint sanctions on two members of the group, Zao Guangzong and Ni Gaobin, and on the Chinese front company operating as a satellite of the intelligence services.

“These defendants were part of a Chinese government-sponsored hacking group, targeting US businesses and US political officials for intrusion for over a decade as part of a larger, malicious global campaign,” said James Smith, the assistant director in charge of the FBI’s New York field office.

Advertisement
Advertise with NZME.

“These charges are yet another example of hostile actions taken by the PRC to attack not only American businesses and infrastructure, but the security of our nation.”

In the UK, Oliver Dowden, the Deputy Prime Minister, said any hostile cyber activity directed towards UK parliamentarians was “completely unacceptable”.

He said the two attacks demonstrated a “clear and persistent pattern of behaviour that signals hostile intent from China”.

APT 31, short for Advanced Persistent Threat 31, was first publicly identified in 2016 and is believed to have operated since 2010.

Read More

  • Government accuses China of state-sponsored cyber attacks ...
  • Cyber attacks: Govt courageous to call out China's ...
  • Chinese cyber attack on Australia exposed...
  • NZ net users fall victim to China-US cyber war - NZ ...

Its most devastating attack came in 2021 when APT 31 and another state-backed group took advantage of a flaw in Microsoft’s email server system, Exchange, to steal personal data.

Around 250,000 email servers were affected by the hack.

Advertisement
Advertise with NZME.

Victims of the attacks included the European Banking Authority and the Norwegian Parliament, with the NCSC claiming that the hack “enabled large-scale espionage”.

Cyber experts have described the group as “highly skilled and sophisticated”.

The UK’s Foreign Office said it had sanctioned a front company representing APT 31, as well as two individuals involved in the group, without naming them.

This would freeze any UK-based assets and deny the individuals entry to Britain.

Save

    Share this article

Latest from World

World

From 'Q' to 'C': MI6 appoints first female leader, gadget chief Blaise Metreweli

16 Jun 01:38 AM
Premium
World

A takeoff, a mayday call, and two pilots who never made it home

16 Jun 01:16 AM
World

World faces new nuclear arms race, researchers warn

16 Jun 12:30 AM

The woman behind NZ’s first PAK’nSAVE

sponsored
Advertisement
Advertise with NZME.

Latest from World

From 'Q' to 'C': MI6 appoints first female leader, gadget chief Blaise Metreweli

From 'Q' to 'C': MI6 appoints first female leader, gadget chief Blaise Metreweli

16 Jun 01:38 AM

The Cambridge graduate and rower is a career intelligence officer.

Premium
A takeoff, a mayday call, and two pilots who never made it home

A takeoff, a mayday call, and two pilots who never made it home

16 Jun 01:16 AM
World faces new nuclear arms race, researchers warn

World faces new nuclear arms race, researchers warn

16 Jun 12:30 AM
Premium
Opinion: Millions of Americans like Trump better in theory than in practice

Opinion: Millions of Americans like Trump better in theory than in practice

15 Jun 11:48 PM
How one volunteer makes people feel seen
sponsored

How one volunteer makes people feel seen

NZ Herald
  • About NZ Herald
  • Meet the journalists
  • Newsletters
  • Classifieds
  • Help & support
  • Contact us
  • House rules
  • Privacy Policy
  • Terms of use
  • Competition terms & conditions
  • Our use of AI
Subscriber Services
  • NZ Herald e-editions
  • Daily puzzles & quizzes
  • Manage your digital subscription
  • Manage your print subscription
  • Subscribe to the NZ Herald newspaper
  • Subscribe to Herald Premium
  • Gift a subscription
  • Subscriber FAQs
  • Subscription terms & conditions
  • Promotions and subscriber benefits
NZME Network
  • The New Zealand Herald
  • The Northland Age
  • The Northern Advocate
  • Waikato Herald
  • Bay of Plenty Times
  • Rotorua Daily Post
  • Hawke's Bay Today
  • Whanganui Chronicle
  • Viva
  • NZ Listener
  • Newstalk ZB
  • BusinessDesk
  • OneRoof
  • Driven Car Guide
  • iHeart Radio
  • Restaurant Hub
NZME
  • About NZME
  • NZME careers
  • Advertise with NZME
  • Digital self-service advertising
  • Book your classified ad
  • Photo sales
  • NZME Events
  • © Copyright 2025 NZME Publishing Limited
TOP
search by queryly Advanced Search