FBI Seeks Four Chinese Nationals in APT 40 Cyber Espionage Investigation
Four Men Charged in International Cyber Campaign
The FBI is seeking information concerning four citizens of the People’s Republic of China accused of participating in a years-long cyber espionage campaign targeting companies, universities, research institutions, government entities, and foreign governments. The four individuals are Zhu Yunmin, Wu Shurong, Ding Xiaoyang, and Cheng Qingmin.
According to the FBI, a federal grand jury in the U.S. District Court for the Southern District of California returned an indictment against the four men on May 28, 2021. They are accused of participating in computer network operations between 2012 and 2018 on behalf of the People’s Republic of China’s Ministry of State Security.
Trade Secrets and Intellectual Property Targeted
Federal prosecutors allege that the cyber campaign was designed to obtain trade secrets, intellectual property, and other valuable information. Targets reportedly included organizations in the United States and other countries, along with multiple foreign governments.
The alleged operations were broad in scope and targeted organizations possessing commercially, scientifically, or strategically valuable information. According to the FBI, the activity affected numerous industries rather than focusing on a single type of organization.
Aerospace, Defense and Healthcare Among Targets
The indictment identifies a wide range of sectors allegedly targeted during the campaign. These included aerospace and aviation, biomedical organizations, the defense industrial base, healthcare, manufacturing, maritime organizations, and research institutions.
Transportation organizations involved in rail and shipping were also allegedly targeted. The FBI states that the campaign additionally sought information associated with virus research. The alleged activity continued from 2012 through 2018.
PRC Ministry of State Security Connection
Federal authorities allege that the four defendants conducted their activities on behalf of the PRC Ministry of State Security. The FBI describes the case as involving APT 40 cyber espionage activities.
The indictment further alleges that front companies were used by the Ministry of State Security to facilitate cyber espionage operations. Such companies allegedly provided a layer of separation between the individuals conducting computer network operations and the government intelligence service authorities say they were supporting.
Zhu Yunmin
Zhu Yunmin (朱允敏) is one of the four individuals identified by the FBI. His STC codes are listed as 2612/0336/2404, and authorities identify Zhu Rong as an alias.
Zhu is wanted in connection with the broader alleged APT 40 computer network campaign. Federal authorities are seeking information that could assist in locating him or advancing the investigation.
Wu Shurong
Wu Shurong (吴淑荣) is also identified in the federal case. His STC codes are listed as 0702/3219/2837.
The FBI identifies several aliases associated with Wu, including “goodperson,” “ha0r3n,” and “Shi Lei.” These names may be particularly relevant to individuals who encountered him through online or technical environments.
Ding Xiaoyang
Ding Xiaoyang (丁晓阳) is the third defendant identified in the FBI's APT 40 wanted notice. His STC codes are 0002/2556/7122.
The FBI lists Ding Hao and Manager Chen as aliases associated with Ding. He is accused of participating in the same long-running cyber espionage campaign targeting sensitive information from organizations in the United States and abroad.
Cheng Qingmin
Cheng Qingmin (程庆民) is the fourth individual named in the federal case. His STC codes are listed as 4453/1987/3046.
The FBI identifies Manager Cheng as an alias associated with him. Like the other three defendants, Cheng is wanted in connection with the alleged computer network operations carried out between 2012 and 2018.
Economic Espionage Investigation
The FBI lists the case under charges involving conspiracy to damage protected computers and commit economic espionage, along with criminal forfeiture. The investigation highlights the potential economic and national-security consequences of cyber operations designed to obtain proprietary research, intellectual property, and other sensitive information.
The allegations against Zhu, Wu, Ding, and Cheng remain criminal accusations unless and until proven in court. The FBI's San Diego Field Office is identified as the field office handling the wanted case.
FBI Seeks Information
The FBI continues seeking information concerning all four individuals. Anyone with information about Zhu Yunmin, Wu Shurong, Ding Xiaoyang, or Cheng Qingmin is encouraged to contact a local FBI office. Individuals outside the United States may contact the nearest U.S. embassy or consulate.
Information can also be submitted through the FBI's official online tip system. Members of the public should provide relevant information directly to law enforcement rather than attempting to independently investigate or locate the individuals.
Sources
FBI — APT 40 Cyber Espionage Activities Wanted Profile
