The United States Files Charges Against Ten Chinese Cybercriminals

The U.S. Department of Justice (DoJ) announced on March 4, 2025, an indictment against ten Chinese nationals accused of cybercriminal activities. Two of them are employed by China’s Ministry of Public Security, while the other eight work for the company i-Soon.

Although i-Soon presents itself as a cybersecurity firm, a data leak published on GitHub in February 2024 revealed its involvement in cyber-espionage. The leaked information included hacking tools and lists of organizations and individuals targeted at the request of the Chinese government.

Between 2016 and 2023, i-Soon hacked email accounts, smartphones, servers, and websites on behalf of Beijing. In the United States, the company targeted major public administrations, religious organizations, and media outlets. It also attacked the foreign ministries of South Korea, India, Indonesia, and Taiwan, as well as Hong Kong-based newspapers.

“The Ministry of State Security and the Ministry of Public Security of the People’s Republic of China have used an extensive network of private companies and contractors in China to conduct cyber intrusions,” the DoJ statement reads. The U.S. State Department is offering up to $10 million (approximately €9.2 million) for any information on these ten cybercriminals.