> TritonInfoSec News
Home / Oct 10, 2026 / Story
0
#10 Graham Cluley general October 09, 2026 at 14:35 UTC

$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack

By Graham Cluley

AI Summary

The U.S. State Department is offering up to $10 million for information on Zhang Yu, a 44-year-old Chinese national accused of being a key figure in the Hafnium APT group responsible for the mass exploitation of Microsoft Exchange Server vulnerabilities. This Rewards for Justice bounty underscores continued U.S. government pressure on Chinese state-sponsored threat actors and may yield new intelligence on Hafnium's current operational infrastructure.

Read full article → https://www.bitdefender.com/en-us/blog/hotforsecur…

Relevance score: 74.0/100

# More from October 10

  1. 1
    FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions The Hacker News
  2. 2
    Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies The Hacker News
  3. 3
    Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland BleepingComputer
  4. 4
    Max severity SonicWall SMA1000 flaw now exploited in attacks BleepingComputer
  5. 5
    Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments The Hacker News
  6. 6
    Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge The Hacker News
  7. 7
    FBI arrests another suspected ShinyHunters hacker after agency breach BleepingComputer
  8. 8
    Low-cost Android phones ship with residential proxy malware BleepingComputer
  9. 9
    Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access The Hacker News