NASA & Military Targeted in 5-Year Defense Software Heist

A significant cybercrime campaign, spanning almost five years, has led to the indictment of a Chinese national identified as Song Wu. This operation, which concluded in December 2021, involved a sophisticated phishing scheme targeting numerous entities within the United States. Wu and unidentified co-conspirators meticulously researched their targets before impersonating colleagues or friends to gain access to sensitive information.

The victims included engineers and researchers at NASA, the Air Force, the Navy, the Army, and the Federal Aviation Administration. Major universities and private companies were also ensnared in the deception. The stolen software was crucial for aerospace design and weapons development, falling under strict export controls that were violated when victims divulged the code.

Wu's activities began in January 2017 and continued until December 2021. Following an alert about suspicious emails, the Office of Investigations Cyber Crimes Division launched an investigation. A federal warrant has since been issued for Song Wu's arrest, with charges including 14 counts of wire fraud and 14 counts of aggravated identity theft. He remains at large.

Officials emphasize the critical importance of adhering to export control regulations and maintaining vigilance, even in routine email communications. Protecting cutting-edge technology from cyber criminals is a primary objective, highlighting the ongoing threats in the digital landscape.