Qian Chuan Wanted by FBI in APT 41 Global Cybercrime Investigation
International Cybercrime Investigation
Qian Chuan is wanted by the FBI for his alleged involvement in a large-scale international cybercrime campaign connected to the Chinese hacking group known as APT 41, also referred to as BARIUM. Federal authorities accuse Qian and his co-defendants of carrying out unauthorized computer intrusions while employed by Chengdu 404 Network Technology Company in China.
The alleged operation targeted hundreds of companies and organizations around the world, including businesses involved in telecommunications, social media, defense, education, manufacturing, and government-related activities.
Supply-Chain Attacks Used to Access Networks
According to the FBI, Qian and his co-defendants allegedly conducted supply-chain attacks designed to gain unauthorized access to computer networks. Such attacks can compromise organizations by targeting technology, software, or other systems relied upon by intended victims.
Federal authorities allege that the defendants used these techniques as part of a broader campaign affecting hundreds of organizations worldwide. The scope of the alleged activity ultimately led to an extensive federal cybercrime investigation.
Hundreds of Companies Targeted
Companies in Australia, Brazil, Germany, India, Japan, and Sweden were among the alleged victims identified by the FBI. The defendants reportedly targeted organizations across a broad range of industries rather than concentrating on one particular business sector.
Social media companies, telecommunications providers, government organizations, defense-related entities, educational institutions, and manufacturers were among the alleged targets. The widespread nature of the activity demonstrates the international reach attributed to the APT 41 operation.
Telecommunications Providers Across the World
Telecommunications networks were another major focus of the alleged cyber campaign. According to the FBI, providers in the United States, Australia, China's Tibet region, Chile, India, Indonesia, Malaysia, Pakistan, Singapore, South Korea, Taiwan, and Thailand were targeted.
The allegations involving telecommunications companies form an important part of the federal case because of the potentially sensitive information and infrastructure accessible through such networks. Investigators accuse the defendants of attempting to gain unauthorized access to protected computer systems across multiple countries.
Ransomware and Payment Demands
The FBI also alleges that the defendants deployed ransomware against victims and demanded payments. The ransomware allegations introduce a financially motivated component to the broader cyber intrusion campaign.
The alleged activities included several forms of cybercrime, ranging from unauthorized computer access and damage to protected systems to identity-related offenses and money laundering. Federal prosecutors ultimately brought numerous charges against Qian and two other Chinese nationals.
Chengdu 404 Network Technology Company
Qian allegedly conducted the unauthorized computer intrusions while employed by Chengdu 404 Network Technology Company. Chinese nationals Fu Qiang and Jiang Lizhi were also charged in connection with the alleged activities.
Federal authorities associate the three defendants with APT 41 and BARIUM. Their alleged activities while working for the Chengdu-based company became the focus of a federal prosecution in Washington, D.C.
Federal Grand Jury Indictment
On August 11, 2020, a federal grand jury in the District of Columbia returned an indictment against Qian Chuan, Fu Qiang, and Jiang Lizhi. The indictment charged the defendants with multiple federal offenses connected with their alleged computer intrusions.
Charges identified by the FBI include racketeering conspiracy, conspiracy, identity theft, aggravated identity theft, access device fraud, obtaining information by unauthorized access to protected computers, intentionally causing damage to protected computers, threatening to damage a protected computer, and money laundering.
The charges against Qian remain allegations unless and until proven in court.
FBI Description of Qian Chuan
The FBI identifies Qian Chuan as a Chinese national with ties to Chengdu, China. He is described as an Asian male with black hair and brown eyes and is known to speak Chinese.
The Bureau also identifies “Squall” as an alias associated with Qian. This information may be particularly useful to individuals who previously encountered him through online communications, technical work, or professional relationships connected with the cybersecurity and technology industries.
Connections to Chengdu
Qian's ties to Chengdu are significant because Chengdu 404 Network Technology Company was based there. Individuals who worked with Qian, encountered him through the company, communicated with someone using his known alias, or have information concerning his movements may possess information relevant to investigators.
Given the nature of the case, information involving online identities, professional relationships, technical accounts, or other digital connections could also be relevant. Such information should be provided directly to appropriate law-enforcement authorities.
FBI Continues Search for Qian Chuan
The FBI continues seeking information concerning Qian Chuan and his current whereabouts. Anyone with information that could assist investigators is encouraged to contact the FBI or submit information through the Bureau's official tip system. Individuals outside the United States may contact the nearest U.S. embassy or consulate.
