Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstalliTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Xu Zewei, a 34-year-old Chinese national, was extradited from Italy and appeared in federal court in Houston on April 27, 2026, according to the U.S. Department of Justice (DOJ). A nine-count indictment accuses him of cyber intrusions targeting COVID-19 research and Microsoft Exchange Server systems. Those charges are allegations, not findings of guilt.
Who is Xu Zewei?
Xu Zewei (徐泽伟) is a Chinese national whom U.S. prosecutors accuse of carrying out cyber intrusions from February 2020 to June 2021. DOJ says he allegedly worked for Shanghai Powerock Network Co. Ltd. and that officers of China’s Ministry of State Security Shanghai State Security Bureau directed his hacking. These claims have not been proven in court. DOJ’s April 27, 2026 announcement says Xu was extradited from Italy over the preceding weekend and appeared that day in the U.S. District Court in Houston.
What does the indictment accuse him of?
Prosecutors allege that Xu and co-conspirators targeted U.S. universities and researchers working on COVID-19 vaccines, treatments, and testing, including alleged communications and mailbox access beginning in February 2020. The indictment also accuses them of exploiting vulnerabilities in Microsoft Exchange Server later in the period.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitches
Alleged Exchange Server activity
DOJ says the defendants allegedly exploited certain Exchange Server vulnerabilities beginning in late 2020 and installed web shells that enabled remote administration. The department describes Exchange Server as a Microsoft product used to send, receive, and store email. It says some of the alleged intrusions were part of the HAFNIUM campaign.
As historical context, DOJ says Microsoft and industry partners released detection tools, patches, and other information during March 2021; the FBI and CISA issued a joint advisory on March 10, 2021; and DOJ announced a court-authorized operation in April 2021 to remediate hundreds of U.S. computers. The United States and foreign partners attributed HAFNIUM to China’s Ministry of State Security in July 2021. These past actions are not a current remediation checklist; administrators should consult current Microsoft and CISA guidance for operational advice.
#1 Best Overall
What is HAFNIUM?
HAFNIUM is the name used for the intrusion campaign associated in DOJ’s account with attacks on Exchange Server. FBI Cyber Division Assistant Director Brett Leatherman said in the DOJ release that the campaign compromised more than 12,700 U.S. organizations. That number is his characterization in the release; it is not presented there with a separate methodology. DOJ also describes thousands of computers worldwide as compromised but gives no precise global total.
Charges and co-defendant
DOJ describes a nine-count indictment that includes wire fraud, unauthorized access to protected computers, intentional damage to protected computers, and aggravated identity theft. The announcement lists statutory maximum penalties for the offenses, but those maximums do not predict a likely sentence. DOJ says co-defendant Zhang Yu (张宇) remained at large as of April 27, 2026.
What happened before the extradition?
| Date | Reported event |
|---|---|
| February 2020 | Prosecutors allege Xu and others began targeting U.S.-based universities and COVID-19 researchers. |
| Late 2020–2021 | Prosecutors allege Exchange Server vulnerabilities were exploited in activity associated with HAFNIUM. |
| July 2025 | Nextgov/FCW reported that Xu was arrested in Milan at the request of U.S. officials. This was his arrest, not his extradition. |
| April 2026 | DOJ said Xu was extradited to the United States and appeared in Houston on April 27. |
Nextgov/FCW reported that Xu denied the allegations through an attorney. An indictment is a formal accusation; Xu is presumed innocent unless proven guilty beyond a reasonable doubt.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What happens next?
Xu’s April 27 appearance was an initial step in the U.S. criminal case, not a verdict. The April 27 DOJ announcement and the same-day Nextgov/FCW report do not establish later hearings, a plea, custody decisions, or the case’s outcome. No later procedural development can be inferred from the extradition alone; subsequent status requires a later official update or current court records.
Quick Recap
Best Value
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
