Listen to the article
FBI Director Patel Reveals Strategic Italian Operation Led to Arrest of Chinese Cyber Hacker
FBI Director Kash Patel has disclosed that his previously scrutinized trip to Italy in early 2026 played a crucial role in facilitating the arrest of a Chinese national accused of hacking U.S. COVID-19 research. The suspect, Xu Zewei, is now in U.S. custody following what Patel described as a meticulously coordinated operation with Italian authorities.
Xu faces federal charges connected to a cyber campaign conducted between 2020 and 2021 that allegedly targeted sensitive research, including work related to COVID-19 treatments and vaccines. The case represents a rare instance where an alleged state-linked hacker has been successfully extradited to face charges in the United States.
“We were able to directly tie Xu to China’s Ministry of State Security and its Shanghai bureau,” Patel told Fox News Digital in an interview, though he noted that additional details remain classified pending declassification procedures.
The arrest stemmed from careful coordination with Italian authorities, led by Prefect Vittorio Pisani of the Italian National Police. Officials from both countries worked within a narrow timeframe to ensure Xu would be apprehended in Italy before potential legal challenges could delay his extradition.
Patel described the suspect as “one of the top two cyber criminals in the world for China,” alleging he played a significant role in hacking efforts targeting American universities, immunologists, and virologists during the height of the COVID-19 pandemic. According to the indictment, Xu allegedly reported to Chinese intelligence officials after compromising a U.S.-based research university in early 2020 and was directed to access email accounts belonging to scientists studying COVID-19.
The FBI director revealed that Chinese officials attempted to intervene in recent days to prevent Xu’s extradition from Italy. Timing was critical, Patel explained, pointing to past cases where suspected Chinese operatives successfully avoided extradition. He cited a 2025 incident where a Chinese national detained in Serbia was ultimately returned to China despite U.S. efforts to secure custody.
“The operation was specifically engineered at a time when our adversaries were looking to hurt us during COVID,” Patel said, adding that the suspect targeted research tied to treatments and vaccines.
Prosecutors allege that beyond the COVID-19 research targets, Xu was involved in exploiting vulnerabilities in Microsoft Exchange Server as part of the broader “HAFNIUM” hacking campaign that compromised thousands of computers worldwide, including more than 12,000 organizations in the United States.
The indictment also outlines how Chinese intelligence services allegedly rely on private contractors to carry out cyber operations, creating plausible deniability for the government. Among the alleged victims was a Washington, D.C.-based law firm where attackers reportedly searched email accounts for information related to U.S. policymakers and government agencies.
While a co-conspirator charged in the case remains at large, Patel declined to discuss specifics about the broader network. He emphasized that China’s Ministry of State Security continues to actively target the United States through cyber operations.
“The MSS is always a target of this FBI. They’re always operating whether it’s to steal our classified information, our nation’s research and scientific information, or anything they can use to embarrass us or leverage against us,” Patel said. “They’re going to keep doing it.”
The FBI director noted that countering Chinese espionage has become a top priority for the bureau, citing a sharp increase in arrests tied to Beijing-linked activity. “We’ve arrested more Chinese spies than any FBI before me,” he said.
Patel indicated that efforts to identify and prosecute individuals connected to similar operations are ongoing, emphasizing: “It’s a priority threat and it’s going to continue to be that way.”
The Chinese embassy did not immediately respond to requests for comment regarding the case.
The arrest comes amid escalating tensions between the United States and China over cybersecurity issues, intellectual property theft, and economic espionage—highlighting the increasingly aggressive stance U.S. law enforcement is taking against alleged state-sponsored cyber activities.
Fact Checker
Verify the accuracy of this article using The Disinformation Commission analysis and real-time sources.
20 Comments
Glad to see the FBI and Italian authorities working together to apprehend this alleged Chinese hacker. Protecting critical research data is of utmost importance, especially during a public health crisis.
Kudos to the FBI and Italian authorities for their coordination in tracking down and apprehending this suspect. Protecting sensitive research data is critical, especially during a global pandemic.
Curious to learn more details on how the FBI was able to directly tie this Chinese hacker to the Ministry of State Security. Sounds like some sophisticated investigative work.
Yes, the ability to trace the hacker’s activities back to the Chinese government is an impressive feat of intelligence gathering.
This is an important case highlighting the ongoing threat of state-sponsored cyber attacks. Kudos to the FBI and Italian authorities for their international cooperation in apprehending this alleged hacker.
I agree, cross-border collaboration is crucial to combating these global cybersecurity threats.
This arrest is a significant win in the ongoing battle against state-sponsored cyberattacks targeting sensitive research data. Glad to see the perpetrator will face justice in the US.
An interesting development in the ongoing battle against foreign cyber threats. Curious to see if this arrest leads to any further disruption of the Chinese hacking campaign.
The extradition of this alleged Chinese hacker is a positive step, but there’s likely still much more work to be done to combat these persistent cyber threats from foreign adversaries.
Indeed, this is an ongoing challenge that will require continued vigilance and international cooperation.
This case highlights the growing threat of state-sponsored cyber espionage targeting sensitive information. Kudos to the law enforcement agencies involved for their collaborative efforts.
Protecting critical research and intellectual property from foreign cyber attacks is an important national security issue. This case shows the value of cross-border law enforcement collaboration.
Successful extradition of state-linked hackers is no easy feat. This arrest demonstrates the FBI and Italian authorities’ commitment to holding perpetrators accountable, even across international borders.
While the details remain classified, it will be interesting to learn more about the investigative techniques and intelligence sharing that led to this hacker’s arrest and extradition.
Agreed, the ability to link this cyber activity directly to the Chinese government is an important development.
The details around how the FBI was able to tie this hacker to the Chinese Ministry of State Security will be worth watching for. Solid investigative work to bring this suspect to justice.
Successful extradition and prosecution of state-linked hackers is no easy feat. This case demonstrates the value of international law enforcement cooperation in combating these sophisticated threats.
Curious to know if this arrest will lead to any further disruption of the Chinese cyber espionage campaign targeting sensitive US research and intellectual property.
A good question. One would hope this sends a strong message and helps deter future such attacks.
The ability to directly link this hacker to the Chinese government is a notable accomplishment. International cooperation is key to combating these sophisticated cyber threats.