This was not an isolated incident: Chinese national exposed by NASA investigation in serial defense software theft phishing campaign that lasted years

Date:
Mon, 27 Apr 2026 16:10:00 +0000

Description:
NASA, the military, and numerous universities and private companies were targeted by this phishing campaign.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Chinese national indicted in a huge phishing campaign NASA, the military, universities and private companies were targeted The perpetrator stole restricted defense software NASAs Office of Inspector General (OIG) has released a report detailing an intricate campaign to steal export-restricted software, orchestrated by a Chinese national.

The campaign targeted engineers at NASA, the Air Force, the Navy, the Army, and the Federal Aviation Administration, as well as major universities and private companies. Posing as a colleague or friend, the perpetrator managed
to convince dozens of professors, researchers, and engineers to share sensitive defense software and code for almost five years. Article continues below You may like Hacker claims to have stolen over 10 petabytes of advanced Chinese military data Chinese hackers hide malware within Windows and Google Drive to hit government targets The biggest heist of the US-China Chip War: 3 Supermicro employees charged with conspiracy to smuggle restricted Nvidia H100, H200, and B200 chips to China dummy boxes, fake labels, and a pass-through company enabled the $2.5 billion scheme Federal warrant issued The Chinese national, identified as Song Wu, was investigated by the Office
of Investigations Cyber Crimes Division (CCD) after receiving an alert that emails were being received from a Gmail account claiming to be an aerospace professor who had collaborated with NASA.

Song Wus phishing campaign began in January 2017 and ended in December 2021, during which time he contacted employees at NASA, the Air Force, the Navy,
the Army, the Federal Aviation Administration, and employees at numerous universities and private companies.

According to the CCD, Song Wu and unidentified co-conspirators would rigorously research their targets, and then pose as a friend or colleague requesting access to copies or source code of modeling software used for aerospace design and weapons development.

As the software was related to defense, it was subject to export controls
that were unknowingly violated when victims fell for Song Wus deception. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro
newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

A federal warrant has been issued for Song Wus arrest, and he has been indicted on 14 counts of wire fraud and 14 counts of aggravated identity theft, but he remains at large, the NASA report said.

Cases like this underscore the importance of complying with export controls and staying vigilant, even during everyday email exchanges, said Ryan
Pittman, the Special Agent in Charge of CCD. At NASA OIG, its our job to protect the Agencys cutting-edge technology and expose cyber criminals who attempt to steal it. The best ID theft protection for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best identity theft protection 1. Best overall: Aura 2. Best for families: IdentityForce 3. Best for credit beginners: Experian IdentityWorks Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/this-was-not-an-isolated-incident-chine se-national-exposed-by-nasa-investigation-in-serial-defense-software-theft-phi shing-campaign-that-lasted-years


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)