U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in connection with the 2021 Microsoft Exchange Server attacks attributed to the HAFNIUM threat group. The reward was reported by NTD news outlet. Zhang Yu is believed to be involved in the widespread exploitation of Microsoft Exchange Server vulnerabilities in 2021. The HAFNIUM campaign targeted thousands of organizations globally, compromising email servers and exfiltrating sensitive data. This bounty is part of the U.S. government's ongoing efforts to hold state-sponsored hackers accountable.