Federal Cybercrime Case Links Zhang Haoran to APT 41 Attacks on Technology and Gaming Companies

Sep 10

Chinese National Named in APT 41 Investigation

Zhang Haoran is wanted by the FBI for his alleged involvement in malicious cyber activity associated with the Chinese hacking group known as APT 41, also referred to as BARIUM. According to the FBI, Zhang and fellow Chinese national Tan Dailin were indicted on multiple federal charges arising primarily from alleged cyber activity targeting high-technology companies, video gaming businesses, and a citizen of the United Kingdom.

Zhang has ties to Chengdu, China, and remains wanted in connection with the federal cybercrime case.

Technology Companies Among Alleged Targets

Federal authorities accuse Zhang and Tan of participating in unauthorized computer intrusions targeting companies in the high-technology sector. The alleged operations involved obtaining information through unauthorized access to protected computers and intentionally causing damage to computer systems.

The investigation eventually resulted in charges encompassing several forms of alleged cybercriminal activity. These included computer intrusions, wire fraud, aggravated identity theft, and money laundering.

Video Gaming Companies Targeted

The video gaming industry was another primary target identified in the federal case. According to the FBI, the charges against Zhang and Tan stem largely from alleged malicious cyber activity directed at high-technology and video gaming companies.

The alleged targeting of gaming companies formed part of a broader series of computer intrusions attributed to members of APT 41. Federal investigators ultimately connected the activities to offenses involving unauthorized access, fraud, identity theft, and damage to protected computer systems.

U.K. Citizen Also Targeted

Federal authorities allege that a citizen of the United Kingdom was targeted as part of the activity underlying the charges. This individual target expanded the case beyond corporate victims and contributed to the international scope of the investigation.

The alleged conduct eventually became the subject of a federal prosecution in Washington, D.C. Zhang and Tan were subsequently named together in an indictment containing numerous cybercrime-related charges.

APT 41 and BARIUM Connection

The FBI identifies Zhang as part of APT 41, a Chinese hacking group also known as BARIUM. The group has been associated with several federal investigations involving alleged malicious cyber activity.

Zhang is one of multiple Chinese nationals identified by the FBI in connection with APT 41. Federal authorities continue investigating alleged members of the group and their involvement in cyber operations affecting organizations and individuals around the world.

Federal Grand Jury Indictment

On August 15, 2019, a federal grand jury in the District of Columbia returned an indictment against Zhang Haoran and Tan Dailin. The two men were charged with multiple federal offenses stemming from their alleged cyber activities.

The charges include conspiracy to cause damage to and obtain information by unauthorized access to protected computers, conspiracy to commit wire fraud, wire fraud, obtaining information by unauthorized access to protected computers, intentionally causing damage to protected computers, aggravated identity theft, money laundering, and aiding and abetting.

The charges against Zhang remain allegations unless and until proven in court.

FBI Description of Zhang Haoran

The FBI identifies Zhang Haoran as a Chinese national. According to the Bureau's wanted information, he was born on May 25, 1985, in China and is described as an Asian male with black hair and brown eyes. The FBI lists Chinese as a language spoken by Zhang.

The FBI also identifies “Atreexp” as an alias associated with him. The alias may be particularly useful to people who encountered Zhang through online communications, technical communities, or other cyber-related activities.

Ties to Chengdu, China

According to the FBI, Zhang has ties to Chengdu, China. Individuals familiar with his activities in the area or who have communicated with someone using his known alias may possess information relevant to investigators.

Information concerning Zhang's professional relationships, online identities, residences, associates, or current whereabouts could potentially assist the investigation. Individuals with relevant information should provide it directly to appropriate law-enforcement authorities.

Tan Dailin Charged Alongside Zhang

Tan Dailin was indicted alongside Zhang in the same 2019 federal case. The FBI also identifies Tan as part of APT 41 and BARIUM and reports that he has ties to Chengdu.

Both defendants face charges primarily arising from the alleged targeting of high-technology companies, video gaming companies, and the U.K. citizen. Federal authorities continue seeking information concerning both men.

Information Sought by FBI

The FBI's Washington Field Office is responsible for Zhang Haoran's wanted case. Anyone with information concerning Zhang, his whereabouts, activities, or known online identities is encouraged to contact the FBI.

Individuals outside the United States may contact the nearest U.S. embassy or consulate. Information can also be submitted through the FBI's official online tip system.