A federal grand jury has returned an 11-count indictment against two Chinese hackers for a "sweeping global computer intrusion campaign" that began over 10 years ago and recently targeted companies developing coronavirus vaccines and treatments, the Justice Department announced Tuesday.
Why it matters: It's believed to be the first time the U.S. government has charged foreign hackers with targeting coronavirus research, according to AP.
- It's also the first time the Justice Department has brought charges against criminal hackers for activity done for their personal gain and for state-sponsored attacks, Assistant Attorney General for National Security John Demers said at a press conference.
The big picture: Intelligence officials have been warning of virus-related cyber intrusions for months.
- In May, U.S. officials announced an uptick in Chinese-government affiliated hackers targeting medical research and other facilities in the U.S. for data on a potential cure or effective treatments to combat the virus.
- Last week, the U.S., U.K. and Canada warned that Russian hackers were attempting to do the same.
Details: The Chinese hackers allegedly targeted robotics, aircraft and marine engineering, clean energy engineering, biotechnology, advanced rail technology, non-governmental organizations, human rights activists in the U.S., China and Hong Kong, as well as vaccine and testing development for the coronavirus, the Justice Department said.
- In January 2020, hackers are alleged to have done reconnaissance on a Massachusetts firm conducting research on a coronavirus vaccine.
- In February, a separate California business working on antiviral drugs was invaded, according to DOJ.
- Most recently, the Chinese hackers sought vulnerabilities in a California firm working on diagnostic research for COVID test kits on May 12.
The bottom line: The Justice Department did not allege that the hackers succeeded in stealing coronavirus research, but officials pointed out that attempted hacks could still slow down research.
- The DOJ said that hundreds of millions of dollars worth of trade secrets, intellectual property and other information was stolen over the decade-long hacking campaign.
What they're saying:
Read the indictment via DocumentCloud.