US Treasury sanctions Chinese cybersecurity firm and hacker behind US network breaches
A cybersecurity company from Sichuan and a hacker from Shanghai recently hacked multiple major US telecoms and internet service providers and compromised the network infrastructure.
Michael A. McCoy/Washington Post/Getty Images
A cybersecurity company from Sichuan and a hacker from Shanghai recently hacked multiple major US telecoms and internet service providers and compromised the network infrastructure.
The Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Sichuan Juxinhe Network Technology Co., a Chinese cybersecurity company, and Yin Kecheng, a Shanghai-based cyber actor.
OFAC alleges that the firm is directly involved with the Salt Typhoon threat actor, which is responsible for breaches of at least nine US telecommunications companies. Meanwhile, Kecheng is found to be responsible for the recent targeting of the Treasury’s information technology systems.
“Yin Kecheng has been a cyber actor for over a decade and is affiliated with the People’s Republic of China Ministry of State Security (MSS),” OFAC stated.
Salt Typhoon has been active since at least 2019 and is responsible for numerous cyberattacks. The recent hacks against major US telecommunication companies mark “a dramatic escalation.”
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
The US is offering a reward of up to $10 million for information on foreign government-directed hackers.
OFAC recently sanctioned several other Chinese companies and individuals for “reckless cyber activity.”
Integrity Technology Group was sanctioned on January 3rd, 2025, for its role in Flax Typhoon's malicious cyber activity. Another firm, Sichuan Silence Information Technology Company, was found to be responsible for dangerous firewall compromises. At the same time, Wuhan Xiaoruizhi Science and Technology Company and two of its employees were identified as threat actors from APT31.
All the US-based or American-controlled property or assets of the blacklisted companies and individuals are now blocked and must be reported to OFAC. US persons are prohibited from engaging in transactions involving any property or interests of designated entities.
Violations of the US sanctions may result in civil or criminal penalties. Additionally, other companies may risk being sanctioned themselves for engaging in activities with blocked persons.