DataBreachesDissent
Chinese hacker extradited from Italy to US for cyber espionage
Part of the HAFNIUM story · since 24 Aug 2025
- Sun 24 Aug, 21:26 UTC. Security Affairs, first report. China-linked Silk Typhoon APT targets North America.
- Tue 26 Aug, 23:15 UTC. BleepingComputer, its first report on the story. Silk Typhoon hackers hijack network captive portals in diplomat attacks.
- Wed 27 Aug, 09:45 UTC. Security Affairs. China linked Silk Typhoon targeted diplomats by hijacking web traffic.
- Mon 27 Apr, 09:21 UTC. Security Affairs. Italy to Extradite Chinese Hacker Xu Zewei to US Over COVID‑19 Cyber Espionage.
- Mon 27 Apr, 23:50 UTC. DataBreaches, its first report on the story. Chinese hacker extradited from Italy to US for cyber espionage. This article, 5th of 10.
- Tue 28 Apr, 09:31 UTC. The Hacker News, its first report on the story. Chinese Hacker Extradited to US Over COVID19 Vaccine Data Theft.
- Tue 28 Apr, 13:47 UTC. SecurityWeek, its first report on the story. US extradites Chinese national over Typhoon university hacks.
- Thu 8 Oct, 08:36 UTC. The Hacker News. US Offers $10 Million Reward for Suspected HAFNIUM Hacker.
- Thu 8 Oct, 11:00 UTC. Security Affairs. US Offers $10 Million Reward for Alleged HAFNIUM Campaign Director.
- Thu 8 Oct, 13:26 UTC. SecurityWeek. US Offers $10 Million Reward for Suspect in Microsoft Exchange Attacks.
A Chinese national has been extradited from Italy to the United States to face criminal charges, according to a DOJ announcement. Xu Zewei is alleged to be a contract hacker for China’s Ministry of State Security who conducted breaches between February 2020 and June 2021 as part of a coordinated intelligence‑gathering campaign. The extradition follows Xu’s 2025 Milan arrest at the request of U.S. authorities for alleged ties to the Silk Typhoon hacking group.
The report on DataBreaches[.]Net, published on 27 April 2026, notes that Xu Zewei was transferred to the United States to face the charges. According to the DOJ announcement, he was described as an operator within China’s cyber espionage operations for its intelligence services.
How the story developed
10 articles from 5 outlets since 24 Aug. Quiet since 8 Oct. This was the 5th report, 246 days after the first.
- Sun 24 Aug, 21:26 UTC. Security Affairs, first report. China-linked Silk Typhoon APT targets North America.
- Tue 26 Aug, 23:15 UTC. BleepingComputer, its first report on the story. Silk Typhoon hackers hijack network captive portals in diplomat attacks.
- Wed 27 Aug, 09:45 UTC. Security Affairs. China linked Silk Typhoon targeted diplomats by hijacking web traffic.
- Mon 27 Apr, 09:21 UTC. Security Affairs. Italy to Extradite Chinese Hacker Xu Zewei to US Over COVID‑19 Cyber Espionage.
- Mon 27 Apr, 23:50 UTC. DataBreaches, its first report on the story. Chinese hacker extradited from Italy to US for cyber espionage. This article, 5th of 10.
- Tue 28 Apr, 09:31 UTC. The Hacker News, its first report on the story. Chinese Hacker Extradited to US Over COVID19 Vaccine Data Theft.
- Tue 28 Apr, 13:47 UTC. SecurityWeek, its first report on the story. US extradites Chinese national over Typhoon university hacks.
- Thu 8 Oct, 08:36 UTC. The Hacker News. US Offers $10 Million Reward for Suspected HAFNIUM Hacker.
- Thu 8 Oct, 11:00 UTC. Security Affairs. US Offers $10 Million Reward for Alleged HAFNIUM Campaign Director.
- Thu 8 Oct, 13:26 UTC. SecurityWeek. US Offers $10 Million Reward for Suspect in Microsoft Exchange Attacks.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 10 articles as a listHide the list
- Sun 24 AugDay 01
- China-linked Silk Typhoon APT targets North America21:26 · Security Affairs · First report
Quiet for 2 days
Tue 26 AugDay 21- Silk Typhoon hackers hijack network captive portals in diplomat attacks23:15 · BleepingComputer · Picked up again
- Wed 27 AugDay 31
- China linked Silk Typhoon targeted diplomats by hijacking web traffic09:45 · Security Affairs
Quiet for 35 weeks
Mon 27 AprDay 2462- Italy to Extradite Chinese Hacker Xu Zewei to US Over COVID‑19 Cyber Espionage09:21 · Security Affairs · Picked up again
- Chinese hacker extradited from Italy to US for cyber espionage23:50 · DataBreaches · This article, 5th of 10
- Tue 28 AprDay 2472
- Chinese Hacker Extradited to US Over COVID19 Vaccine Data Theft09:31 · The Hacker News
- US extradites Chinese national over Typhoon university hacks13:47 · SecurityWeek
Quiet for 23 weeks
Thu 8 OctDay 4103- US Offers $10 Million Reward for Suspected HAFNIUM Hacker08:36 · The Hacker News · Picked up again
- US Offers $10 Million Reward for Alleged HAFNIUM Campaign Director11:00 · Security Affairs
- US Offers $10 Million Reward for Suspect in Microsoft Exchange Attacks13:26 · SecurityWeek