Chinese Silk Typhoon Hacker Extradited to the U.S. from Italy

A Chinese national, Xu Zewei, has been extradited to the U.S. and charged in a multi-count indictment alleging he conducted state-directed intrusions on behalf of China’s MSS/Shanghai State Security Bureau as part of the HAFNIUM campaign (Feb 2020–Jun 2021). The report details targeted compromises of U.S. universities and COVID-19 researchers, exploitation of Microsoft Exchange Server vulnerabilities, installation of web shells for persistent access, investigative attribution to HAFNIUM/MSS, and a U.S. court-authorized operation to remove web shells from affected systems.