- Authorities in Italy have extradited a Chinese citizen named Xu Zewei accused of hacking-related crimes to the United States as a result of being.
- The US government is accusing Xu of stealing COVID-19 research and collaborating with a group backed by the Chinese government.
- The Chinese Embassy in Rome condemned the actions of both the U.S. and Italian Governments as politically motivated, while Xu’s family contends that Xu is not guilty.
Italy just handed over a Chinese national named Xu Zewei to American authorities. The charges involve stealing COVID-19 vaccine research and hacking government systems. Zewei is now in the United States after a top Italian court gave the green light earlier this month.
The Arrest at Milan’s Airport
Italian police arrested Xu the moment he arrived at Malpensa Airport in Mila on July 3 last year. US officials had been after Xu for a long time for committing wire fraud, identity theft, etc. Supposedly, he was hacking into people’s computers from early 2020 through mid-2021 when the COVID pandemic was at its peak.
Identity theft is also a major concern following corporate data breaches — a separate incident saw 657,000 BitMart user emails exposed online, highlighting how personal information can be compromised not just by state-sponsored hackers but through security lapses at cryptocurrency exchanges and other online platforms.
The accusations? They say Xu went after American universities and top scientists, folks working on COVID vaccines and treatments. Also, the feds claim Xu was working for the Chinese government the entire time.
Ties to a Broader Hacking Group
The case gets even bigger from there. US authorities believe Xu has ties to a cyber-espionage group called Hafnium. Some security firms also know it as Silk Typhoon.
Based on the DOJ’s statement, Hafnium infiltrated thousands of computers worldwide. They targeted top US government agencies like the Treasury Department. The group’s attacks were large-scale and well organized.
Italian interior ministry documents back this up. They describe Hafnium as a “large-scale cyber intrusion campaign orchestrated” by the Chinese government. The campaign aimed to gather information on various U.S. government policies.
Family Fights Back, Says It’s Mistaken Identity
Xu’s family tells a completely different story. His wife strongly opposes the extradition. She spoke to Italian postal police after her husband’s arrest.
“Both my husband and I do not agree with extradition to the United States,” she said. “Him getting an entry visa to Italy should be a confirmation that we have not committed crimes.” She said she cannot understand the reason for his arrest.
The couple claims Xu is just an innocent IT technician. He works as an IT manager at Shanghai GTA Semiconductor Ltd. His wife says he only develops systems and networks. His own lawyer also argued from the start that his client was a victim of mistaken identity.
China Reacts Angrily to the Extradition
China’s Foreign Ministry spokesperson spoke out against the move on Monday. Beijing accused the United States of fabricating charges by means of political manipulation. They also urged Italy to respect facts and law, and to correct its mistakes immediately.
The spokesperson warned Italy not to become “an accomplice of the U.S.” Beijing clearly sees this extradition as a diplomatic attack. They do not accept the idea that Xu acted on behalf of the Chinese government.
Italian police seized Xu’s documents and electronic devices. They did this based on the U.S. request. The source who confirmed the extradition did not say when Xu actually flew out. They only confirmed he is already in American custody.
Implications of This Case
This case matters because it connects one person to two major types of cyber operations. First, stealing sensitive COVID-19 research from universities. Second, breaking into government systems on a massive scale.
It also shows how countries now handle cyber espionage. They don’t just fight it with firewalls and patches; they employ legal means, such as Extradition and diplomatic pressure. These aren’t exactly new tricks for European governments, but the way they deploy them lately has changed a bit.
Take, for example, what Italy did by handing over Xu to the US. That wasn’t just following the rule book; it was a pretty loud signal that European countries are now clearly willing to team up with the U.S. when it comes to cybercrime cases, even when China’s in the mix.
That’s a shift from just a few years back, where things felt a whole lot more guarded and hesitant. This kind of cooperation matters because these attacks keep growing.
The deeper problem remains unsolved. Groups like Hafnium succeed because systems have weak patches and slow detection. Better identity controls and faster international coordination could stop them. But for Xu, the fight now moves to American courtrooms.
