Three men from Henan, China, were arrested in Singapore for their involvement in illegal hacking activities. The suspects—Yan Peijian, Huang Qin Zheng, and Liu Yuqi—were allegedly recruited by a Ni-Vanuatu citizen named Xu Liangbiao under false pretenses. They arrived in Singapore with fraudulent work permits, intending to work for Xu but instead engaged in hacking operations focused on online gambling sites and a Chinese SMS service.
Background of the Arrest
The men were housed in a rented bungalow in the Mount Sinai area. From September 2022 to May 2023, they worked under Xu’s guidance to exploit vulnerabilities in targeted websites.
- Yan Peijian, 39, focused on Linux systems.
- Huang Qin Zheng, 36, specialized in web systems.
- Liu Yuqi, 33, worked on Windows systems.
In total, the trio earned about US$3 million (approximately S$3.9 million) in cryptocurrency for their hacking efforts.
Methodology and Targets
Utilizing sophisticated tools, including remote access trojans (RATs) linked to the notorious hacking group Shadow Brokers, the men conducted penetration tests on various domains. Their targets included:
- Five government domains from Australia, Argentina, and Vietnam.
- Communications from Kazakhstan’s Ministry of Foreign Affairs.
- An SMS service company in China, Yi Mei, used by major gambling sites.
They aimed to gather personal data from users at gambling sites to aid Xu’s business efforts, including advertising and luring users to new platforms.
Legal Consequences
On November 5, 2024, the trio was sentenced to prison after a police raid uncovered malware and hacking tools on their devices. Their sentences were:
- Yan Peijian: 28 months and 1 week.
- Huang Qin Zheng: 28 months and 1 week.
- Liu Yuqi: 28 months and 4 weeks.
Deputy Public Prosecutor Hon Yi noted that while they did not target Singaporean websites, their activities still posed reputational risks to the country due to the foreign government data found on their devices.
Defence and Arguments
During the trial, the defense argued that the trio did not initially intend to commit crimes when they first entered Singapore. However, the prosecution highlighted the sophistication and planning involved in their operations. The court emphasized that even unsuccessful efforts in hacking reflect a clear intent to engage in illegal activities.
Conclusion
The case of these three Chinese hackers reinforces the ongoing concerns regarding cybersecurity and the global implications of hacking operations. The incident illustrates not only the dangers posed by cybercriminals but also the responsibilities of nations in safeguarding their digital landscapes.
