Chinese national indicted for alleged spear-phishing targeting NASA software

Appellate Courts
Webp wpo2qnr6l3z6xlesk41kxslf70gd
Ryan K. Buchanan U.S. Attorney | US Attorney's office Northern District of Georgia

Song Wu, a Chinese national, has been indicted on charges of wire fraud and aggravated identity theft. These charges stem from his alleged efforts to fraudulently obtain computer software and source code created by the National Aeronautics and Space Administration (NASA), research universities, and private companies.

"Efforts to obtain our nation’s valuable research software pose a grave threat to our national security," said U.S. Attorney Ryan K. Buchanan. "However, this indictment demonstrates that borders are not barriers to prosecuting bad actors who threaten our national security."

"Once again, the FBI and our partners have demonstrated that cyber criminals around the world who are seeking to steal our companies’ most sensitive and valuable information can and will be exposed and held accountable," stated Keri Farley, Special Agent in Charge of FBI Atlanta. "As this indictment shows, the FBI is committed to pursuing the arrest and prosecution of anyone who engages in illegal and deceptive practices to steal protected information."

According to U.S. Attorney Buchanan, Song allegedly engaged in a multi-year spear-phishing email campaign. He purportedly created email accounts impersonating U.S.-based researchers and engineers to obtain specialized restricted or proprietary software used for aerospace engineering and computational fluid dynamics. This specialized software could be utilized for industrial and military applications, such as developing advanced tactical missiles or aerodynamic design assessments of weapons.

Song allegedly sent spear-phishing emails targeting individuals employed with various U.S. government entities including NASA, the U.S. Air Force, Navy, Army, and the Federal Aviation Administration. He also targeted employees at major research universities across Georgia, Michigan, Massachusetts, Pennsylvania, Indiana, Ohio, as well as private sector companies involved in aerospace.

During this period, Song was employed as an engineer at Aviation Industry Corporation of China (AVIC), a state-owned aerospace and defense conglomerate headquartered in Beijing.

Song Wu faces 14 counts each of wire fraud and aggravated identity theft. Each count of wire fraud carries a maximum statutory sentence of 20 years in prison while aggravated identity theft mandates a two-year consecutive sentence if convicted.

Members of the public are reminded that an indictment only contains charges; it is the government's burden to prove guilt beyond a reasonable doubt at trial.

The case is being investigated by the Federal Bureau of Investigation (FBI) alongside NASA's Office of Inspector General. Assistant U.S. Attorney Samir Kaushal is prosecuting with assistance from Trial Attorney Tanner Kroeger within the National Security Cyber Section.

This case is coordinated by the Disruptive Technology Strike Force co-led by the Departments of Justice and Commerce aimed at protecting supply chains from illicit actors acquiring critical technology.

For further information contact the U.S. Attorney’s Public Affairs Office at USAGAN.PressEmails@usdoj.gov or (404) 581-6016.