The Office of the Inspector General of NASA and the FBI have uncovered an alleged phishing campaign that for four years allowed a Chinese citizen to access sensitive software related to aerospace design and armament development. The accused is Song Wu, who is wanted and at large and has an active federal arrest warrant.
The investigation places the alleged activity between 2017 and 2021. During that period, Song Wu would have contacted dozens of professionals from the aerospace sector, among them personnel from NASA and from the Air Force, the Navy, the Army and the Federal Aviation Administration, in addition to universities and private companies.
Impersonation of experts to gain access to restricted programs
The researchers maintain that the suspect posed as American engineers and academics to deceive employees and researchers of institutions considered key. To do this, he would have created fake email accounts with which he impersonated the identity of recognized experts in aerospace engineering.
The alleged objective was to gain access to restricted software and even its source code. In numerous cases, the victims would have shared critical information convinced that they were collaborating with legitimate colleagues, without knowing that with this they could violate the export controls of the United States.
That regulatory framework prohibits transferring certain technologies to foreign countries for national security reasons. The joint investigation concludes that the cybercriminal was specifically looking for modeling tools used in the design of aircraft and military systems.
A total of 28 charges and a federal arrest warrant
Song Wu has been charged with 14 counts of wire fraud and another 14 counts of aggravated identity theft. For each of the wire fraud charges, the maximum penalty contemplated is 20 years in prison. To that is added an additional penalty of two years if he is finally found guilty of the crime of aggravated identity theft.
At this moment, the accused remains at large. The authorities maintain active the federal arrest warrant while the procedure advances.
More than 80 investigations in a decade
"Cases like this underscore the importance of complying with export controls and remaining vigilant, even during everyday email exchanges" - Ryan Pittman, special agent in charge of the CCD
"At the NASA Office of Inspector General, our job is to protect the Agency's cutting-edge technology and unmask cybercriminals who try to steal it" - Ryan Pittman, special agent in charge of the CCD
The NASA Office of Inspector General itself has recalled that in the last decade it has opened more than 80 investigations related to violations of export controls. The economic impact attributed to these cases exceeds 5.8 million dollars, a figure that reflects the scope of investigations focused on protecting technology considered strategic.