U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

The U.S. State Department offered up to $10 million for information on Zhang Yu, accused in the HAFNIUM Microsoft Exchange Server attacks (2020–2021) that exploited multiple zero-day flaws including ProxyLogon; the indictment alleges Zhang coordinated state-linked intrusions via private companies tied to China’s MSS and contributed to a campaign that compromised thousands of U.S. organizations.