The person at the center of this case
JIANG Lizhi (cybercriminal defendant)
Justice for JIANG Lizhi (cybercriminal defendant) — the trail went cold in 2020, but the truth hasn't.
Start here
What is JIANG Lizhi's current location and how is he evading international law enforcement?
What specific supply chain attack methods did APT 41 use to compromise hundreds of companies globally?
How much financial gain did the defendants obtain through ransomware demands and data theft?
On August 11, 2020, a federal grand jury in Washington, D.C. indicted Chinese national JIANG Lizhi and two co-conspirators for operating as part of the APT 41 hacking group, conducting unauthorized computer intrusions targeting hundreds of companies worldwide. The defendants, allegedly employed by Chengdu 404 Network Technology Company, executed supply chain attacks, deployed ransomware, and stole sensitive data from victims across telecommunications, government, defense, and manufacturing sectors in multiple countries. JIANG Lizhi remains at large, and investigators continue seeking information about his whereabouts and the full scope of damages caused by this sophisticated international cybercriminal operation.
Try asking
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
Beyond the top three above — each detail below could be the thread that pulls this case open.
What are the roles and current status of co-conspirators QIAN Chuan and FU Qiang?
Beyond Chengdu, what other locations in China or internationally were used as operational bases for these cyberattacks?
Even the smallest detail could be the key to solving this case.
Official wording
Racketeering Conspiracy; Conspiracy; Identity Theft; Aggravated Identity Theft; Access Device Fraud; Obtaining Information by Unauthorized Access to Protected Computers; Intentionally Causing Damage to Protected Computers; Threatening to Damage a Protected Computer; Money Laundering Caution: JIANG Lizhi is part of a Chinese hacking group known as APT 41 and BARIUM. On August 11, 2020, a Grand Jury in the District of Columbia returned an indictment against Chinese nationals JIANG Lizhi, QIAN Chuan , and FU Qiang on multiple charges including Racketeering Conspiracy; Conspiracy; Identity Theft; Aggravated Identity Theft; Access Device Fraud; Obtaining Information by Unauthorized Access to Protected Computers; Intentionally Causing Damage to Protected Computers; Threatening to Damage a Protected Computer; and Money Laundering.
These charges stem from their alleged unauthorized computer intrusions while employed by Chengdu 404 Network Technology Company. The defendants allegedly conducted supply chain attacks to gain unauthorized access to networks throughout the world, targeting hundreds of companies representing a broad array of industries to include: social media, telecommunications, government, defense, education, and manufacturing.
These victims included companies in Australia, Brazil, Germany, India, Japan and Sweden. The defendants allegedly targeted telecommunications providers in the United States, Australia, China (Tibet), Chile, India, Indonesia, Malaysia, Pakistan, Singapore, South Korea, Taiwan, and Thailand.
The defendants allegedly deployed ransomware attacks and demanded payments from victims. Remarks: JIANG Lizhi has ties to Chengdu, China.
Grand Jury in the District of Columbia returned indictment against JIANG Lizhi, QIAN Chuan, and FU Qiang on multiple charges including racketeering conspiracy, identity theft, unauthorized computer access, and money laundering