Counterintelligence & Tradecraft — 2026-04-29

Chinese Silk Typhoon Hacker Extradited from Italy to U.S. for Pandemic-Era Espionage

Xu Zewei, a Chinese national accused of working for China's Ministry of State Security to exploit Microsoft Exchange zero-days during the HAFNIUM campaign, was extradited from Italy and charged in federal court. The campaign compromised nearly 13,000 U.S. organizations including COVID-19 researchers, defense contractors, and policy think tanks.

Analysis
Italy's extradition of Xu Zewei to U.S. jurisdiction is among the rarest of outcomes for an alleged MSS contractor in Europe, where expulsion or quiet release is the norm; the HAFNIUM campaign's breadth, spanning COVID-19 researchers, defense contractors, and think tanks, gave Washington sufficient political leverage to make the transfer stick. Per a single CyberScoop report, charges root Xu directly in MSS operational infrastructure, narrowing his defense but not foreclosing delay: classified-information challenges give an MSS-linked defendant structural incentive to drag proceedings, and conviction or guilty plea by end of 2026 is uncertain. DOJ's likelier primary interest is putting MSS tradecraft on a public court record, with law enforcement outcome secondary.
1 sources
  1. Chinese national extradited to US for pandemic-era Silk Typhoon attacks - CyberScoop

View in full brief →

UNCLASSIFIED // OPEN SOURCE