The person at the center of this case
Multiple organizations and companies worldwide (telecommunications, government, defense, education, manufacturing sectors)
Justice for Multiple organizations and companies worldwide (telecommunications, government, defense, education, manufacturing sectors) — the trail went cold in 2020, but the truth hasn't.
Start here
Where is QIAN Chuan currently located and what resources is he using to evade capture?
What is the complete list of compromised companies and government networks, and how much data was exfiltrated?
What is the operational structure and current status of Chengdu 404 Network Technology Company?
QIAN Chuan, a Chinese national allegedly part of the APT 41 hacking group, was indicted in August 2020 for leading coordinated cyberattacks targeting hundreds of companies worldwide across telecommunications, government, defense, and other critical sectors. The investigation revealed supply chain attacks, ransomware deployment, and identity theft schemes affecting victims in at least 12 countries. Despite the indictment, QIAN Chuan remains at large, and authorities continue seeking information about the full scope of compromised networks and stolen data from these sophisticated operations.
Try asking
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
Beyond the top three above — each detail below could be the thread that pulls this case open.
What financial trails and money laundering schemes were used to move proceeds from ransomware and extortion payments?
What are the identities and current whereabouts of co-conspirators FU Qiang and JIANG Lizhi?
Even the smallest detail could be the key to solving this case.
Official wording
Racketeering Conspiracy; Conspiracy; Identity Theft; Aggravated Identity Theft; Access Device Fraud; Obtaining Information by Unauthorized Access to Protected Computers; Intentionally Causing Damage to Protected Computers; Threatening to Damage a Protected Computer; Money Laundering Caution: QIAN Chuan is part of a Chinese hacking group known as APT 41 and BARIUM. On August 11, 2020, a Grand Jury in the District of Columbia returned an indictment against Chinese nationals QIAN Chuan, FU Qiang, and JIANG Lizhi on multiple charges including Racketeering Conspiracy; Conspiracy; Identity Theft; Aggravated Identity Theft; Access Device Fraud; Obtaining Information by Unauthorized Access to Protected Computers; Intentionally Causing Damage to Protected Computers; Threatening to Damage a Protected Computer; and Money Laundering.
These charges stem from their alleged unauthorized computer intrusions while employed by Chengdu 404 Network Technology Company. The defendants allegedly conducted supply chain attacks to gain unauthorized access to networks throughout the world, targeting hundreds of companies representing a broad array of industries to include: social media, telecommunications, government, defense, education, and manufacturing.
These victims included companies in Australia, Brazil, Germany, India, Japan and Sweden. The defendants allegedly targeted telecommunications providers in the United States, Australia, China (Tibet), Chile, India, Indonesia, Malaysia, Pakistan, Singapore, South Korea, Taiwan, and Thailand.
The defendants allegedly deployed ransomware attacks and demanded payments from victims. Remarks: QIAN Chuan has ties to Chengdu, China.
Grand Jury in the District of Columbia returned indictment against QIAN Chuan, FU Qiang, and JIANG Lizhi on multiple charges including racketeering conspiracy, identity theft, unauthorized computer access, and money laundering.