APT 41 Member Tan Dailin Accused in Cyberattacks Targeting Technology and Gaming Companies

Sep 8

International Cybercrime Investigation

Tan Dailin is wanted by the FBI for his alleged involvement in malicious cyber activity connected to the Chinese hacking group known as APT 41, also referred to as BARIUM. According to the FBI, Tan and fellow Chinese national Zhang Haoran were indicted on multiple federal charges stemming primarily from alleged cyberattacks targeting high-technology companies, video gaming businesses, and a citizen of the United Kingdom.

The federal case involves allegations of unauthorized access to protected computers, wire fraud, identity theft, money laundering, and intentional damage to computer systems. Tan has ties to Chengdu, China, and remains wanted in connection with the case.

High-Technology Companies Targeted

Federal authorities allege that Tan and Zhang participated in malicious cyber activity directed at companies in the high-technology sector. The defendants are accused of obtaining information through unauthorized access to protected computer systems and intentionally causing damage to computers.

The alleged intrusions formed part of a broader cybercrime operation attributed to APT 41. Investigators ultimately connected the activity to several federal offenses involving computer intrusions, fraud, identity theft, and financial transactions.

Video Gaming Industry Among Alleged Victims

Video gaming companies were also among the primary targets identified in the federal case. According to the FBI, the charges against Tan and Zhang stem largely from alleged activity directed at high-technology and gaming companies.

Gaming companies can hold valuable intellectual property, customer information, proprietary software, and other digital assets. The allegations against Tan involve unauthorized access and damage to protected computer systems associated with the broader operation.

U.K. Citizen Targeted

The federal case was not limited to corporations. The FBI states that a citizen of the United Kingdom was also targeted by the alleged activity.

The inclusion of an individual victim outside the United States highlights the international nature of the investigation. Federal prosecutors ultimately pursued the case in Washington, D.C., where Tan and Zhang were indicted.

APT 41 and BARIUM

The FBI identifies Tan as part of the Chinese hacking group known as APT 41, which is also known as BARIUM. The Bureau has connected multiple wanted Chinese nationals with cyber activity attributed to the group.

APT 41 has been the subject of extensive U.S. law-enforcement attention over alleged malicious cyber operations affecting organizations and individuals in multiple countries. Tan's case is one of several federal prosecutions involving individuals identified by the FBI as members of the group.

Federal Grand Jury Returns Indictment

On August 15, 2019, a federal grand jury in the District of Columbia returned an indictment against Tan Dailin and Zhang Haoran. Both Chinese nationals were charged with multiple offenses stemming from their alleged cyber activities.

The charges include conspiracy to cause damage to and obtain information by unauthorized access to protected computers, conspiracy to commit wire fraud, wire fraud, obtaining information by unauthorized access to protected computers, intentionally causing damage to protected computers, aggravated identity theft, money laundering, and aiding and abetting.

The charges against Tan are allegations unless and until proven through the judicial process.

FBI Description of Tan Dailin

According to the FBI, Tan Dailin was born on October 29, 1984, in China. He is a Chinese national described as an Asian male with black hair and brown eyes. The Bureau lists Chinese as a language spoken by Tan.

The FBI also identifies “Withered Rose” and “BlackWolf” as aliases associated with him. These identifiers could be particularly significant to individuals who encountered Tan through online communications, technical communities, or professional cybersecurity environments.

Connections to Chengdu

The FBI states that Tan has ties to Chengdu, China. Information concerning his activities, professional relationships, residences, online accounts, or associates in the region could potentially assist investigators.

Because cybercrime investigations frequently involve online identities, individuals who recognize Tan's known aliases may also possess useful information even if they have never met him in person. Relevant information should be provided directly to law enforcement.

Zhang Haoran Also Charged

Zhang Haoran was indicted alongside Tan in the same federal case. The FBI also identifies Zhang as part of APT 41 and BARIUM.

Both men face charges arising primarily from the alleged targeting of high-technology companies, video gaming companies, and the U.K. citizen. Federal authorities continue seeking information concerning the defendants and their whereabouts.

FBI Continues Cyber Fugitive Investigation

Tan remains wanted as part of the FBI's continuing cybercrime investigation. Anyone with information concerning Tan Dailin, his whereabouts, known aliases, or activities is encouraged to contact the FBI. Individuals outside the United States may contact the nearest U.S. embassy or consulate.

Information can also be submitted through the FBI's official online tip system. Members of the public should provide relevant information directly to authorities rather than attempting to independently locate or investigate Tan.