The person at the center of this case
Multiple victims including high-technology companies, video gaming companies, telecommunications providers, and government entities across multiple countries
Justice for Multiple victims including high-technology companies, video gaming companies, telecommunications providers, and government entities across multiple countries — the trail went cold in 2019, but the truth hasn't.
Start here
What is the current location and status of ZHANG Haoran, TAN Dailin, QIAN Chuan, FU Qiang, and JIANG Lizhi?
What specific ransomware variants and attack methodologies did APT 41 employ in their supply chain attacks?
How extensive were the telecommunications provider compromises across Asia-Pacific nations, and what critical infrastructure may have been affected?
APT 41, a Chinese hacking group also known as BARIUM, conducted sophisticated cyber attacks targeting high-technology companies, video gaming firms, and telecommunications providers across multiple continents between 2019 and 2020. Five Chinese nationals—ZHANG Haoran, TAN Dailin, QIAN Chuan, FU Qiang, and JIANG Lizhi—were indicted on charges including unauthorized computer access, identity theft, money laundering, wire fraud, racketeering, and ransomware deployment. The case remains active as authorities work to locate and apprehend the defendants, who allegedly targeted hundreds of victims in industries ranging from defense and government to education and manufacturing across dozens of countries.
Try asking
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
Beyond the top three above — each detail below could be the thread that pulls this case open.
What connections exist between APT 41/BARIUM and Chinese government or state-sponsored cyber operations?
Which private sector companies and government agencies have been confirmed as victims, and what data was exfiltrated?
Even the smallest detail could be the key to solving this case.
Official wording
Caution: ZHANG Haoran , TAN Dailin , QIAN Chuan , FU Qiang , and JIANG Lizhi are all part of a Chinese hacking group known as APT 41 and BARIUM. On August 15, 2019, a Grand Jury in the District of Columbia returned an indictment against Chinese nationals ZHANG Haoran and TAN Dailin on charges including Unauthorized Access to Protected Computers, Aggravated Identity Theft, Money Laundering, and Wire Fraud.
These charges primarily stemmed from alleged activity targeting high technology and video gaming companies, and a United Kingdom citizen. On August 11, 2020, a Grand Jury in the District of Columbia returned an indictment against Chinese nationals QIAN Chuan , FU Qiang , and JIANG Lizhi on charges including Racketeering, Money Laundering, Fraud, Identity Theft, and Access Device Fraud.
These charges stem from their alleged unauthorized computer intrusions while employed by Chengdu 404 Network Technology Company. The defendants allegedly conducted supply chain attacks to gain unauthorized access to networks throughout the world, targeting hundreds of companies representing a broad array of industries to include: social media, telecommunications, government, defense, education, and manufacturing.
These victims included companies in Australia, Brazil, Germany, India, Japan and Sweden. The defendants allegedly targeted telecommunications providers in the United States, Australia, China (Tibet), Chile, India, Indonesia, Malaysia, Pakistan, Singapore, South Korea, Taiwan, and Thailand.
The defendants allegedly deployed ransomware attacks and demanded payments from victims.
Grand Jury in the District of Columbia indicted ZHANG Haoran and TAN Dailin on charges of unauthorized computer access, aggravated identity theft, money laundering, and wire fraud targeting high-technology and video gaming companies
Grand Jury in the District of Columbia indicted QIAN Chuan, FU Qiang, and JIANG Lizhi on charges including racketeering, money laundering, fraud, identity theft, and access device fraud related to supply chain attacks