US Sanctions Chinese Firm for Global Ransomware and Firewall Hacks

A federal court in Indiana has charged Guan Tianfeng, a Chinese national, for conspiring to exploit a zero-day vulnerability in Sophos firewalls, infecting approximately 81,000 devices worldwide in 2020. Guan, working with Sichuan Silence Information Technology Co. Ltd., developed malware to steal information and encrypt files, targeting firewalls globally, including in the U.S. The indictment highlights the Justice Department's efforts to hold accountable China-based cyber actors threatening global cybersecurity. The FBI and Sophos collaborated to mitigate the threat, and the U.S. has announced rewards and sanctions related to the case.