US authorities on Thursday accused a Chinese national visiting the US of providing malware that has been linked to the theft of security clearance records of millions of US government employees.
Yu Pingan of Shanghai was arrested on Monday at Los Angeles International Airport after a federal criminal complaint accused him of conspiring with others wielding malicious software known as Sakula, a US Department of Justice spokesman said on Thursday.
The complaint said the group attacked a series of unnamed US companies using Sakula, the same program involved in US Office of Personnel Management hacks detected in 2014 and 2015.
The filing did not mention the hacks of the office.
The arrest could provide information on those hacks, which US officials have blamed on the Chinese government.
In an FBI affidavit linked to the complaint, an FBI agent said he believed Yu provided versions of Sakula to two unnamed men that he knew would be used to carry out attacks on the firms.
Yu’s court-appointed attorney, Michael Berg, said Yu was a teacher with no affiliation with the Chinese government.
“He says he has no involvement in this whatsoever,” Berg said, adding that Yu came to Los Angeles for a conference.
The Justice Department and San Diego FBI declined to comment further.
The court filings said Sakula had rarely been seen before the attacks on US companies and Yu knew the software he was providing would be used in the hacks carried out between 2010 and 2015.
Though those targeted were not named, some companies appeared to be in the aerospace and energy industries.
Adam Meyers, vice president at US security firm CrowdStrike, said software flaws and one of the Internet protocol addresses cited in the complaint matched up with attacks on a US turbine manufacturer, Capstone Turbine, and a French aircraft supplier.
Meyers said Sakula could be used by multiple groups, but that all of the known targets would be of interest to the Chinese government.
The Office of Personnel Management breach was a subject of US-China talks and the Chinese government previously told US diplomats it had arrested some criminals in the case.
Yu remains in jail pending a court hearing on his detention next week.