NASA OIG Details Song Wu’s Alleged Spear-Phishing Campaign for Defense Software
Summary
NASA’s OIG says a campaign from 2017 to 2021 used impersonation to obtain aerospace software and source code from U.S. agencies, universities, and firms. Song Wu was indicted in 2024; the OIG says victims shared sensitive information in some cases.
Key points
- The OIG said Song Wu impersonated U.S. researchers and engineers to solicit proprietary aerospace modeling software and source code.
- The campaign ran from January 2017 to December 2021 and targeted NASA, military branches, the FAA, universities, and private companies.
- According to the OIG, victims shared sensitive information with imposter accounts in a handful of cases.
- A 2024 indictment charges Wu with wire fraud and aggravated identity theft; he remains at large.
- The indictment alleges Wu was an engineer at China’s state-owned Aviation Industry Corporation of China (AVIC).
- The OIG warned of repeated software requests, unusual payment arrangements, and unconventional transfer methods as possible warning signs.
Article Details
- Victim Organization
- NASA, the U.S. Air Force, Navy, Army, Federal Aviation Administration, universities, and private-sector firms
- Incident Type
- Spear-phishing and impersonation to obtain proprietary aerospace modeling software, source code, and sensitive defense technology
- Data Types Exposed
- Proprietary aerospace modeling software
- Source code
- Sensitive defense technology
- Affected Records
- Not disclosed; the OIG said information was shared in a handful of cases.
- Affected Data Size
- Not disclosed
- Operational Impact
- The OIG said victims shared sensitive information with imposter accounts in a handful of cases. No operational disruption was reported.
- Ransom Or Extortion
- Unknown
- Claim Status
- alleged
MITRE ATT&CK
Threat Actors
Countries
ChinaThe Department of Justice indicted Song in 2024, linking him to the Aviation Industry Corporation of China (AVIC) and prompting the FBI to add him to its Most Wanted list.United StatesThe NASA Office of Inspector General disclosed a multi-year spear-phishing campaign in which Chinese national Song Wu impersonated U.S.
Industries
Aerospace and defenseAccording to the 2024 indictment, Song was an engineer at the Aviation Industry Corporation of China (AVIC), a Chinese state-owned aerospace and defense conglomerate founded in 2008.Governmentresearchers to obtain aerospace modeling software and sensitive defense technology from NASA, government agencies, universities, and private companies.