ZHOU SHUAI
Also known as: "Coldface", "Coldface Chow"
Current age (if alive)
46
Gender
male
Nationality
China
Date of case
2/25/2025
Country
United States
Physical Description
Eye color
Brown
Hair color
Black
Ethnicity
Asian
Caution
Zhou Shuai and Yin Kecheng are wanted for their alleged involvement in compromising and stealing data belonging to scores of victims around the world. The men, and their co-conspirators, allegedly exploited vulnerabilities in victim networks, conducted reconnaissance once inside those networks, and installed malware, such as PlugX malware, that provided persistent access. The men then allegedly identified and stole data from the compromised networks by exfiltrating it to servers under their control. They also allegedly brokered stolen data for sale and provided it to various customers, only some of whom had connections to the PRC government and military. Zhou Shuai allegedly sold data stolen by Yin Kecheng through i-Soon, a company whose primary customers included the PRC Ministry of State Security (MSS) and the Ministry of Public Safety (MPS). In 2023, a Grand Jury in the District of Columbia returned an indictment against Zhou Shuai on multiple charges related to criminal activity occurring between 2018 and 2020.
Remarks
Zhou Shuai was last known to reside in Shanghai, China.
Reward
The United States Department of State’s Transnational Organized Crime Rewards Program is offering a reward up to $2,000,000 for information leading to the arrest and/or conviction of Zhou Shuai.
Last updated: 5/30/2026