The U.S. Department of Justice recently revealed the indictment of Song Wu, a Chinese national, on charges of wire fraud and aggravated identity theft. The accusations against Wu involve an elaborate phishing campaign aimed at stealing specialized software and source code developed by NASA and other critical U.S. aviation agencies.
Prosecutors accused Song Wu of carrying out a sophisticated spear phishing operation that spanned several years. His targets included key individuals within various U.S. government agencies such as NASA, the Air Force, Navy, Army, and the Federal Aviation Administration. Wu’s primary objective was to unlawfully obtain restricted or proprietary software essential for aerospace engineering and computational fluid dynamics. These programs play a crucial role in both industrial applications and military advancements, including the development of advanced tactical missiles and cutting-edge weapon systems.
In addition to government entities, Wu’s phishing emails also targeted reputable research universities in several states like Georgia, Michigan, Massachusetts, Pennsylvania, Indiana, and Ohio, as well as private aerospace companies. These institutions and businesses are integral to U.S. innovation and defense efforts, making them prime targets for cybercriminals seeking to pilfer valuable intellectual property.
Wu employed a deceptive tactic in his phishing scheme by creating fake email accounts that appeared to be from trusted professionals in the aerospace industry. By impersonating U.S.-based researchers, engineers, and colleagues, Wu misled victims into believing they were engaging with familiar contacts. He then requested access to restricted software and source code with the intention of acquiring confidential information for industrial and potentially military uses in China.
At the time of his alleged activities, Song Wu was employed as an engineer at the Aviation Industry Corporation of China (AVIC), a major defense contractor and state-owned aerospace conglomerate based in Beijing. This affiliation raised concerns about potential espionage and national security threats posed by Wu’s actions.
In response to the indictment, U.S. Attorney Ryan K. Buchanan emphasized the gravity of efforts to obtain valuable research software, labeling them as a serious national security risk. Buchanan underscored the Justice Department’s commitment to prosecuting cybercriminals, regardless of their geographical location, as illustrated by Wu’s indictment.
Special Agent in Charge of FBI Atlanta, Keri Farley, echoed these sentiments, highlighting the FBI’s dedication to exposing and holding cybercriminals accountable for their actions. Farley emphasized that Wu’s indictment underscores the FBI’s ongoing mission to combat cyber espionage and safeguard sensitive information held by U.S. companies.
The charges against Song Wu include 14 counts of wire fraud and 14 counts of aggravated identity theft. If convicted, Wu could face up to 20 years in prison for each wire fraud count and a mandatory two-year consecutive sentence for aggravated identity theft. The severity of the charges reflects the potential damage Wu’s alleged actions could have inflicted on U.S. technological and defense advancements.
The investigation into Song Wu’s activities is a collaborative effort between the FBI and NASA’s Office of Inspector General. Assistant U.S. Attorney Samir Kaushal is leading the prosecution, supported by the National Security Division’s Trial Attorney Tanner Kroeger and the Counterintelligence and Export Control Section. Their work is vital in navigating the complexities of international cybercrime and ensuring that those threatening U.S. national security face legal repercussions.
The case is part of a broader initiative led by the Disruptive Technology Strike Force, an interagency law enforcement team co-led by the Departments of Justice and Commerce. The Strike Force aims to combat illicit actors seeking to steal critical technology from the U.S., particularly by authoritarian regimes and adversarial nations. Utilizing a range of tools and authorities, the Strike Force strengthens the enforcement of export control laws and prevents valuable technology from falling into the hands of foreign adversaries.
Overall, Song Wu’s indictment underscores the ongoing threat of cyber espionage and the crucial need for collaboration between law enforcement agencies to counter such activities and protect national security interests.