Treasury sanctions Chinese cyber company, employee for 2020 global firewall attack

Executive summary: A security researcher at Sichuan Silence discovered and weaponized a zero-day in a firewall product in April 2020, using it to compromise approximately 81,000 firewalls worldwide, exfiltrate usernames and passwords, and attempt deployment of the Ragnarok ransomware; the incident affected thousands of businesses including U.S. critical infrastructure, prompted OFAC sanctions against the individual and company, a DOJ indictment, and a State Department reward offer.