Justice Department charges Chinese hackers-for-hire linked to Treasury breach

The Department of Justice unsealed charges against 12 China-linked hackers and contractors accused of decade-long intrusion campaigns that exploited multiple enterprise vulnerabilities (Microsoft Exchange, Palo Alto firewalls, Citrix NetScaler, Ivanti Pulse Connect Secure) to steal and sell data from over 100 organizations — including the U.S. Treasury — with ties to APT27 and the I-Soon contractor; defendants remain at large and U.S. authorities have offered rewards for information leading to arrests.