The U.S. Department of the Treasury has sanctioned Wuhan Xiaoruizhi Science and Technology Company, Limited (Wuhan XRZ) for its involvement in malicious cyber operations targeting U.S. critical infrastructure. This action is part of a coordinated effort with the U.S. Department of Justice, FBI, and the UK Foreign, Commonwealth & Development Office.
Two Chinese nationals, Zhao Guangzong and Ni Gaobin, affiliated with Wuhan XRZ, were also sanctioned for their roles in these cyber operations. The sanctions block all property and interests in property of the designated persons that are in the United States.
Wuhan XRZ was established in 2010 by the Hubei State Security Department as a front company for cyber operations. Zhao Guangzong was specifically involved in a 2020 spear phishing operation against the United States Naval Academy and the United States Naval War College.
APT 31, a Chinese state-sponsored hacking group, is suspected of targeting U.S. critical infrastructure sectors, including the Defense Industrial Base and energy sectors. These activities are considered one of the greatest threats to U.S. national security.
The sanctions against Wuhan XRZ and its affiliates were made under Executive Order 13694, as amended. Additionally, the U.S. Department of State announced a Rewards for Justice offer for information on the sanctioned individuals.