Wang Dong (hacker)
Hacker
- Nationality
- China
Wang Dong is a member of the People's Liberation Army and is a Chinese hacker who is part of PLA Unit 61398.
Background
Wang Dong (Chinese: 汪东) is a member of the People's Liberation Army (PLA) of China and is affiliated with PLA Unit 61398, a military unit that has been associated with cyber operations targeting foreign entities.
Activities
Between 2004 and 2014, Wang Dong allegedly participated in cyberattacks directed at the United States alongside other members of the People's Liberation Army. During this period, he reportedly used the Chinese messaging service WeChat and a Chinese military forum to communicate with fellow operatives in connection with these activities.
Wang Dong's alleged methods included purchasing internet domains and uploading malware to PUDN, a Chinese file-hosting service. He reportedly prefixed each domain he acquired with "ug." as a means of asserting personal ownership over them. Among the targets of his alleged intrusions were classified documents related to nuclear power plant infrastructure and the email accounts of United States officials.
Despite his operational activities, Wang Dong left identifiable traces online that federal investigators were able to follow, ultimately contributing to his identification.
Indictment
Wang Dong was indicted along with other Chinese nationals serving in PLA Unit 61398. The indictment represented a significant step by United States authorities in publicly attributing state-sponsored cyberattacks to named individuals within the Chinese military. In response, China's foreign ministry characterized the indictment against Wang Dong and the other individuals as "extremely ridiculous."
Following the indictment, Wang Dong and other Chinese nationals connected to Unit 61398 were barred from attending DefCon, one of the world's prominent hacker and security research conferences.
