U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

Zhang Yu, a Chinese national and director at Shanghai Firetech Information Science and Technology, is wanted by U.S. authorities for his alleged role in state-sponsored cyber espionage activities linked to the HAFNIUM campaign. He is charged in connection with the 2021 Microsoft Exchange Server attacks that exploited zero-day vulnerabilities, including ProxyLogon, to compromise over 12,700 U.S. organizations. The U.S. State Department is offering up to $10 million for information leading to his identification or location. Zhang allegedly coordinated hacking operations on behalf of China's Ministry of State Security, targeting U.S. universities involved in COVID-19 research and an international law firm, alongside co-conspirator Xu Zewei, who was extradited to the U.S. in April 2026.

AI-extracted · verify before operational use