Chinese Engineer Indicted for Phishing Campaign Targeting NASA

A Chinese national, Song Wu, has been indicted by the U.S. Department of Justice (DOJ) for his involvement in a prolonged spear-phishing campaign aimed at stealing sensitive software and source code from NASA, U.S. defense organizations, universities, and private companies. Wu, who allegedly worked for a major Chinese defense contractor, faces multiple charges, including wire fraud and aggravated identity theft.

According to the indictment, Song Wu impersonated U.S. researchers and engineers through carefully crafted spear-phishing emails, targeting victims within NASA, the U.S. Air Force, the Navy, and the Army, as well as prominent universities in Georgia, Michigan, and several other states. His aim was to obtain specialized software related to aerospace engineering and computational fluid dynamics — technologies with both civilian and military applications, such as missile development and weapons design.

Wu is accused of exploiting the trust of his victims by sending emails that appeared to come from colleagues or familiar figures within the research community. He allegedly used this tactic to deceive individuals into providing access to restricted software and intellectual property. The stolen software had significant value, with potential uses in military-grade aircraft design and advanced weaponry, raising concerns about national security.

At the time of the attacks, Song was employed as an engineer at the Aviation Industry Corporation of China (AVIC), a state-owned aerospace and defense corporation headquartered in Beijing. AVIC is one of the world's largest defense contractors, manufacturing civilian and military aircraft. The DOJ's statement highlighted the risks posed by foreign actors stealing cutting-edge U.S. technology to enhance their own defense capabilities.

The investigation was led by the FBI and NASA Office of Inspector General, who have been working alongside the U.S. Attorney's Office for the Northern District of Georgia and the National Security Division's Cyber Section. FBI Special Agent Keri Farley commented on the importance of the indictment, stating that the FBI remains committed to exposing and prosecuting cybercriminals who attempt to steal sensitive U.S. intellectual property.

If convicted, Wu faces a maximum sentence of 20 years for each of the 14 counts of wire fraud and an additional mandatory two-year sentence for aggravated identity theft. U.S. Attorney Ryan K. Buchanan emphasized that borders would not protect cybercriminals from being held accountable for their actions, especially when they pose a threat to national security.

This case has also drawn the attention of the Disruptive Technology Strike Force, a U.S. government initiative designed to prevent the illicit acquisition of critical technologies by authoritarian regimes. Led by the Departments of Justice and Commerce, this strike force plays a key role in protecting supply chains and enforcing export control laws against foreign actors.