A 59 year-old Florida telco engineer was sentenced to 48 months in prison after he served as a spy for China and provided Beijing with details like his employer’s cybersecurity, according to the US Department of Justice.

According to the DoJ, Ping Li, a US citizen and Chinese immigrant, [1]admitted to being a "cooperative contact" for China's Ministry of State Security (MSS) since as early as 2012 – meaning he assisted in activities like conducting research and obtaining information on behalf of the Ministry.

Li sought info on Chinese dissidents and pro-democracy advocates, members of the Falun Gong spiritual movement, US-based non-governmental organizations, and information he obtained from his employer. He used anonymous Gmail and Yahoo ! accounts, and other online services, to communicate to MSS, and even travelled to China for meetings.

[2]

The DoJ has referred to Li's two employers as "a major US telecommunications company and an international information technology company." Those euphemisms have been unmasked by other media outlets as Verizon and Infosys – details which correspond to what is likely Li's LinkedIn page.

[3]China's Salt Typhoon cyber spies are deep inside US ISPs

[4]Chinese cyberspies reportedly breached Verizon, AT&T, Lumen

[5]Uncle Sam accuses telco IT pro of decade-long spying campaign for China

[6]Microsoft names Chinese group as source of new attack on SolarWinds

According to the US government, Li provided information on the Verizon’s China-based branches, training instruction plans, and hacking events that targeted US companies – including [7]the SolarWinds attack which is thought to have been exploited by the Chinese government. He was asked to provide cyber security training materials and other information regarding the international IT provider he next worked for.

Li was responsive and productive: he sometimes turned around MSS requests in a day during his decade of working for the Ministry.

[8]

In addition to four years of jail time, Li was issued a $250,000 fine and three years of supervised release.

The US has become increasingly concerned about Beijing-backed espionage efforts, especially the exploits of a group labelled “Salt Typhoon” that is [9]thought to have attacked Verizon, AT&T, and Lumen Technologies.

[10]

Mark Warner, chair of the Senate Intelligence Committee, last week said, “my hair is on fire”, such is the extent of Chinese attackers’ penetration of US networks, which he feels may mean “thousands” of network devices need to be replaced to address persistent access. ®

Get our [11]Tech Resources



[1] https://www.justice.gov/opa/pr/florida-telecommunications-and-information-technology-worker-sentenced-conspiring-act-agent

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z0b71CqfLBQIO550D_93pQAAARQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://www.theregister.com/2024/09/25/chinas_salt_typhoon_cyber_spies/

[4] https://www.theregister.com/2024/10/07/verizon_att_lumen_salt_typhoon/

[5] https://www.theregister.com/2024/07/25/us_it_pro_spying_charge/

[6] https://www.theregister.com/2021/07/14/dev_0322_solarwinds_serv_u_zero_day/

[7] https://www.theregister.com/2021/07/14/dev_0322_solarwinds_serv_u_zero_day/

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z0b71CqfLBQIO550D_93pQAAARQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[9] https://www.theregister.com/2024/10/07/verizon_att_lumen_salt_typhoon/

[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z0b71CqfLBQIO550D_93pQAAARQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[11] https://whitepapers.theregister.com/