FBI Warns of China’s Expanding Hack-for-Hire Network Amid Extradition Case

The Chinese government’s alleged hack-for-hire ecosystem is rapidly expanding and becoming increasingly difficult to control, according to a senior FBI official. Speaking on Thursday, FBI Assistant Director Brett Leatherman warned that this growing cyber network enables criminals to operate with a level of “plausible deniability,” complicating global cybersecurity efforts while raising concerns about state-sponsored hacking.

Leatherman’s remarks follow the recent extradition of Xu Zewei, a 34-year-old Chinese national, from Italy to the United States. Xu faces serious allegations tied to large-scale cyberattacks conducted between 2020 and 2021. Authorities claim he acted under the direction of the Chinese government while working for a contractor linked to state intelligence operations. Xu was initially arrested in Milan in July 2025, and his extradition was approved by an Italian court.

According to the U.S. Department of Justice (DOJ), Xu and his associates targeted U.S.-based universities, immunologists, and virologists involved in COVID-19 vaccine research, treatment development, and testing. The DOJ further alleges that Xu reported directly to China’s Ministry of State Security, specifically the Shanghai State Security Bureau, which then directed specific cyber espionage activities.

The hacking operations also included exploitation of vulnerabilities in Microsoft Exchange Server, part of a campaign widely known as “Hafnium.” This cyberattack targeted multiple sectors, including law firms, with hackers allegedly seeking sensitive information related to U.S. policymakers and government agencies.

Leatherman emphasized that while Chinese hackers may receive protection within China, that protection disappears once they travel internationally. This warning highlights increased global cooperation in cybersecurity enforcement and signals growing risks for individuals involved in state-linked cybercrime.

China has denied the allegations, with Foreign Ministry spokesperson Lin Jian accusing the U.S. of “political manipulation” and urging Italy not to support such actions. Despite these denials, the case underscores rising tensions over cybersecurity, espionage, and international law enforcement as governments work to combat sophisticated hacking operations.