Wu Yingzhuo
Attribution profile
- Type
- Spy
- Location
- China
- Known incidents
- 3 incidents
- Sources
- 0 sources
- First seen
- 2011-01-01
- Last seen
- 2017-11-27
- Updated
- 2026-10-14 20:50
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The threat actor, known by the alias Wu Yingzhuo, is a Chinese national associated with the China‑based cybersecurity firm Boyusec. Publicly reported operations show the group conducted multi‑year intrusions against corporations in the financial, engineering and technology sectors, notably targeting Moodys Analytics, Siemens and Trimble Inc. to exfiltrate internal documents, communications and trade secrets while employing identity theft against employees. The U.S. Department of Justice charged the individuals with conspiracy, computer hacking, theft of trade secrets and identity theft, indicating a financially motivated espionage campaign aimed at commercial advantage. No specific malware families or initial‑access vectors are detailed in the sources; the described tactics involve sustained unauthorized network access, computer hacking and identity‑theft techniques. Attribution is to the three individuals linked to Boyusec, with no publicly asserted state nexus or criminal‑consortium affiliation beyond their employment at the firm.
Incidents
Attributed incidents are available to members.
3 incidentsSources
Sources available to members: 0 sources.