China; China

Room J2518, No. 912, Yecheng Road, Jiading Industrial District, Shanghai, 201800, China

913101145559933417, Unified Social Credit Code (USCC); 310114002134793, Registration Number

Today, the Department of the Treasury’s Office of Foreign Assets Control (OFAC) is designating Zhou Shuai, a Shanghai-based malicious cyber actor and data broker, and his company, Shanghai Heiying Information Technology Company, Limited (Shanghai Heiying). Zhou Shuai established Shanghai Heiying Information Technology Company, Limited (Shanghai Heiying) in 2010 and is still its majority owner. Shanghai Heiying is a Shanghai-based cybersecurity company that has employed numerous known China-backed malicious cyber actors, including Yin Kecheng. OFAC is designating Shanghai Heiying pursuant to E.O. 13694, as further amended, for being owned or controlled by, or having acted or purported to act for or on behalf of, directly or indirectly, Zhou Shuai, a person whose property and interests in property are blocked pursuant to E.O. 13694, as further amended.

https://home.treasury.gov/news/press-releases/sb0042

2025-03-05

US

• Executive Order 13694 of April 1, 2015 Blocking the Property of Certain Persons Engaging in Significant Malicious Cyber-Enabled Activities • Executive Order 13757 of December 28, 2016 Taking Additional Steps to Address the National Emergency With Respect to Significant Malicious Cyber-Enabled Activities • JANUARY 16, 2025 Executive Order on Strengthening and Promoting Innovation in the Nation’s Cybersecurity

OFAC-horizontal

Cyber-attacks

Blocking Property, Suspending Entry

• https://ofac.treasury.gov/sanctions-programs-and-country-information/sanctions-related-to-significant-malicious-cyber-enabled-activities

JANUARY 15, 2025. FACT SHEET: New Executive Order on Strengthening and Promoting Innovation in the Nation’s Cybersecurity. Malicious countries and criminals continue to target the United States Government, corporations and individual Americans with cyberattacks. They disrupt critical services, businesses and individual lives, costing billions of dollars and harming national security. This capstone executive order is the result of a review of how these attacks occurred, to understand how to better protect and secure these systems, stay ahead of threats, and make it riskier, costlier and harder for cyber attackers to conduct future attacks. The United States stands alone among major economies in lacking secure, privacy-preserving digital identity infrastructure, leaving Americans exposed to a wave of cybercrime. Indeed, Americans face $56 billion in identity fraud every year and the U.S. Government confronts billions of dollars in fraud in Federal programs due to the lack of secure, usable digital identities. The Executive Order addresses this problem, making Federal programs more efficient, cutting bureaucracy and fraud, helping Americans be safe online, and promoting America’s digital economy. Defending against cyber attackers requires rapidly deploying new technologies. The Executive Order addresses this challenge by promoting the use of new AI-based tools for cyber defense and accelerating the transition to “post-quantum cryptographic” algorithms to resist attacks leveraging quantum computing capabilities.

SDN