The person at the center of this case
Multiple international victims of data theft and cybercrime
Cold Case · Open
181 days waiting
ZHOU SHUAI
Justice for Multiple international victims of data theft and cybercrime — the trail went cold in 2026, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1Where is Zhou Shuai currently located and what aliases or identities might he be using?
🔍
evidence
Lead #2What specific networks and organizations were compromised, and what sensitive data was stolen and sold?
📞
contact
Lead #3Who were the customers that purchased stolen data, particularly those with PRC government and military connections?
Zhou Shuai is wanted by the FBI for his alleged involvement in a sophisticated international cybercrime conspiracy that compromised networks and stole data from victims worldwide between 2018 and 2020. Working with co-conspirators including Yin Kecheng, he allegedly exploited network vulnerabilities, installed malware like PlugX, and exfiltrated stolen data to servers under his control. The case remains unsolved with Zhou Shuai at large, last known to be in Shanghai, China, and a $2 million reward is offered for information leading to his capture.
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
👤
person
Lead #4What is the current status and whereabouts of co-conspirator Yin Kecheng and other unnamed co-conspirators?
💡
clue
Lead #5What role did i-Soon play in brokering and distributing stolen data to MSS and MPS customers?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Cause Damage To, and Obtain Information By Unauthorized Access To, Protected Computers, to Commit Wire Fraud, and to Commit Aggravated Identity Theft; Wire Fraud; Obtaining Information by Unauthorized Access to Protected Computers; Intentionally Causing Damage to Protected Computers; Aggravated Identity Theft; Money Laundering Caution: Zhou Shuai and Yin Kecheng are wanted for their alleged involvement in compromising and stealing data belonging to scores of victims around the world. The men, and their co-conspirators, allegedly exploited vulnerabilities in victim networks, conducted reconnaissance once inside those networks, and installed malware, such as PlugX malware, that provided persistent access.
The men then allegedly identified and stole data from the compromised networks by exfiltrating it to servers under their control. They also allegedly brokered stolen data for sale and provided it to various customers, only some of whom had connections to the PRC government and military.
Zhou Shuai allegedly sold data stolen by Yin Kecheng through i-Soon, a company whose primary customers included the PRC Ministry of State Security (MSS) and the Ministry of Public Safety (MPS). In 2023, a Grand Jury in the District of Columbia returned an indictment against Zhou Shuai on multiple charges related to criminal activity occurring between 2018 and 2020.
Remarks: Zhou Shuai was last known to reside in Shanghai, China.
Timeline of Events
🕵️
2018
Criminal activity period begins
Zhou Shuai and co-conspirators begin exploiting network vulnerabilities and conducting unauthorized access to protected computers
🕵️
2020
Criminal activity period ends
The alleged criminal conspiracy activities conclude
🕵️
2023
Grand Jury indictment
A Grand Jury in the District of Columbia returned an indictment against Zhou Shuai on multiple charges including wire fraud, unauthorized computer access, and aggravated identity theft
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:January 1, 2018
Last Updated:September 11, 2026
Up to $2,000,000 Reward
For information leading to the resolution of this case
Leave a comment
Comments
Case Information
Incident:January 1, 2018
Last Updated:September 11, 2026
Up to $2,000,000 Reward
For information leading to the resolution of this case