Threat Actor
Xu Zewei
- First Reported
- Apr 27, 2026
- Latest Reported
- Oct 8, 2026
Reported Context (5)
- Accused of participating with Zhang Yu in computer intrusions and data theft. US Offers $10 Million Reward for Accused Hafnium Hacker Zhang Yu
- The DOJ alleges that Xu conducted cyberattacks on behalf of China’s MSS and SSSB, including attacks on universities and researchers and exploitation of Microsoft Exchange Server vulnerabilities. He was extradited to the US and faces charges. U.S. Extradites Xu Zewei, Accused of Silk Typhoon Cyberattacks
- Accused of exploiting Microsoft Exchange Server zero-days, stealing research and other data, and implanting webshells as part of the alleged campaign. He was extradited to the United States and charged; the allegations are not established as fact in the article. U.S. Charges Extradited Xu Zewei Over Alleged HAFNIUM Espionage Campaign
- U.S. authorities accuse Xu of acting as a contracted hacker for China’s Ministry of State Security and participating in cyberespionage intrusions. The allegations have not been established as facts in the article. Alleged Silk Typhoon Hacker Xu Zewei Extradited to U.S.
- U.S. prosecutors allege Xu participated in HAFNIUM intrusions and Microsoft Exchange attacks at the direction of Chinese security services. Xu denies involvement and claims mistaken identity; the allegations have not been established in court. Xu Zewei Extradited to U.S. to Face Charges Over Alleged HAFNIUM Intrusions
People (7)
Threat Actors (6)
MITRE ATT&CK (3)
Vendors (1)
Products (2)
Industries (6)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
