CaseCalendar.net

Emanuel Ashtor, a co-owner of Vali Tech Inc., and four co-defendants were charged in the Southern District of Florida with conspiracy to damage protected computers, commit wire and mail fraud, launder money, and transfer false identification documents. The indictment ties the scheme to North Korean IT workers who obtained remote jobs at 64 U.S. companies. It alleges Ashtor hosted victim-company laptops, installed remote-access software, and invoiced through Vali Tech for a North Korean worker's pay, with Vali Tech paid $206,080. A calendar call is set for December 9, 2026, and a jury trial for December 14, 2026. Co-defendant Erick Ntekereze Prince pled guilty to wire and mail fraud conspiracy and was sentenced to 18 months in prison and three years of supervised release.

3:24-cr-00151 (M.D. Tenn.) — Matthew Isaac Knoot, a Nashville resident, was charged in the Middle District of Tennessee with facilitating a remote IT work scheme. In it, an overseas worker using the persona "Yang Di" and a stolen U.S. identity obtained jobs at U.S. companies, while Knoot hosted company laptops and installed remote desktop software without authorization. The indictment ties the scheme to North Korean IT workers and alleges at least $258,553.74 in wages and $544,700 in damages. Knoot pled guilty to Count One, conspiracy to cause damage to protected computers, and the remaining counts were dismissed on the government's motion. He was sentenced on May 1, 2026 to 18 months in prison, one year of supervised release, $15,100 in restitution to four victim companies, and a $100 special assessment, and he has appealed.

26-5455 (6th Cir.) — Matthew Knoot is appealing his conviction for conspiracy to cause damage to protected computers, to which he pled guilty, after being sentenced to 18 months in prison, one year of supervised release, $15,100 in restitution to four victim companies, and a $100 special assessment. The indictment alleged that Knoot, a Nashville resident, acted as a U.S. facilitator for an overseas IT worker, hosting company-issued laptops and installing remote-access software without authorization. It ties the scheme to North Korean IT workers and alleges at least $544,700 in damages to victim companies. The remaining five counts were dismissed on the government's motion.

Zhenxing Wang, a New Jersey resident, was charged in a nine-defendant indictment in the District of Massachusetts with conspiracies to commit wire and mail fraud, launder money, commit identity theft, and damage a protected computer. The indictment alleges he hosted U.S. companies' laptops through his firm Independent Lab LLC so overseas IT workers could access them remotely, in a scheme it ties to North Korea that reached more than 100 U.S. companies. Wang pled guilty to the wire and mail fraud conspiracy and money laundering conspiracy counts, and on April 14, 2026 he was sentenced to 92 months imprisonment, three years supervised release, no fine, and a $200 special assessment. The identity theft and protected computer counts were dismissed on the government's motion.

Kejia "Tony" Wang, a New Jersey resident, was charged in the District of Massachusetts with conspiracy to commit wire and mail fraud, money laundering conspiracy, and conspiracy to commit identity theft, in a scheme the information ties to North Korean IT workers who used stolen U.S. identities to get remote jobs at more than 100 U.S. companies. The information alleges he ran shell companies Hopana Tech and Tony WKJ, received victim companies' laptops, and moved proceeds to overseas co-conspirators. Wang pled guilty to all three counts on September 3, 2025, and on April 15, 2026 was sentenced to 108 months in prison, three years of supervised release, and $29,236.03 in restitution to Snaplogic, Inc., plus a $300 special assessment. He was ordered to self-surrender to the Bureau of Prisons by July 10, 2026.

Oleksandr Didenko, a Ukrainian national, was charged in the District of Columbia with conspiracy to commit wire fraud, aggravated identity theft, money laundering conspiracy and related offenses for running UpworkSell, which the indictment says created 869 false proxy identities and 2,663 accounts and set up U.S. "laptop farms" for overseas IT workers, including North Korean IT workers. He pled guilty on November 10, 2025 to conspiracy to commit wire fraud and aggravated identity theft, and on February 19, 2026 was sentenced to 60 months in prison (36 months and 24 months, consecutive), $46,547.28 in restitution to Trinity Technology Partners, a $200 special assessment, and a forfeiture money judgment of $1,420,185.64. The remaining counts were dismissed on the government's motion.

Kim Kwang Jin, along with co-defendants Kang Tae Bok, Jong Pong Ju and Chang Nam Il, was charged in the Northern District of Georgia with wire fraud conspiracy, three counts of wire fraud, and money laundering conspiracy. The indictment alleges the four were North Korean citizens who used false identities to get remote IT jobs with technology companies, then stole virtual currency valued at more than $900,000 from those companies. It alleges Kim worked for an Atlanta blockchain company under a stolen identity, altered its smart contracts in March 2022 to take about $740,000 in tokens, and sent proceeds through the Tornado Cash mixer. The indictment also seeks forfeiture, including money judgments.

The indictment charges Jong Song Hwa, identified as the DPRK national who led the sanctioned front companies Yanbian Silverstar and Volasys Silverstar, along with 13 other North Korean nationals, in the Eastern District of Missouri. Jong is charged with conspiracy to violate the International Emergency Economic Powers Act, conspiracy to commit wire fraud, money laundering conspiracy, and conspiracy to commit identity theft. The indictment alleges that from April 2017 to March 2023 the defendants used stolen or borrowed U.S. identities to place at least 130 North Korean IT workers in remote jobs with U.S. businesses and nonprofits, extorting some employers, and generating at least $88 million in revenue for North Korea.

Connor Riley Moucka, a Canadian resident, was charged along with co-defendant John Erin Binns in the Western District of Washington over a hacking and extortion scheme. The indictment alleges they breached at least 10 organizations' cloud computing instances, accessed billions of customer records, and extorted at least 36 bitcoin (about $2.5 million) from three victims. Moucka pled guilty to conspiracy, computer fraud and abuse, wire fraud, and aggravated identity theft (Counts 1, 2, 14, and 19), and the court accepted the plea on August 20, 2026. His plea agreement describes at least 165 victim organizations and more than $9.5 million in losses. Sentencing is scheduled for January 27, 2027.

Christina Chapman was charged in the District of Columbia with conspiracy to defraud the United States, wire fraud and money laundering conspiracies, and aggravated identity theft. The indictment alleges she ran a "laptop farm" at her homes for overseas IT workers, in a scheme it ties to North Korean IT workers, affecting more than 300 U.S. companies and generating at least $6.8 million in revenue. Chapman pled guilty to conspiracy to commit wire fraud, aggravated identity theft, and conspiracy to launder monetary instruments, and the remaining counts were dismissed. She was sentenced on July 24, 2025 to 102 months in prison, made up of concurrent 78-month terms on two counts and a consecutive 24-month term on the identity theft count, plus a $300 special assessment. She was also ordered to pay restitution, and the court entered an order of forfeiture.

Minh Phuong Ngoc Vong of Bowie, Maryland was charged in the District of Maryland with conspiracy to commit wire fraud. The indictment alleged he used false claims about his education and experience to get a remote software developer job at a Virginia company working on an FAA contract, while co-defendant John Doe, a/k/a William James, located in Shenyang, China, did the work while posing as Vong. Vong pled guilty to the charge, and the plea agreement's stipulated facts say he obtained jobs at no fewer than 13 U.S. companies that paid him more than $970,000 in salary. On December 4, 2025, he was sentenced to 15 months in prison, three years of supervised release, and a $100 special assessment, and the court entered a preliminary order of forfeiture.

Alexander Paul Travis, an active-duty Army soldier at Fort Gordon, Georgia, was charged in the Southern District of Georgia with wire fraud conspiracy. The information alleges he let overseas IT workers use his identity to get remote jobs at eight U.S. companies, in a scheme it ties to North Korean IT workers. The companies paid those workers over $193,000 in salary, and Travis received at least $51,397. Travis pled guilty and was sentenced on March 18, 2026 to 12 months plus one day in prison, three years supervised release, a $2,000 fine, and a $100 special assessment, with a self-report date of May 18, 2026. The court also entered a final order of forfeiture on a $193,265 money judgment.

Jason Salazar was charged in the Southern District of Georgia with wire fraud conspiracy for allegedly letting overseas IT workers use his identity and the company laptops sent to his home to get remote jobs with at least fourteen U.S. companies, which paid over $409,000 in salary, in a scheme the information ties to North Korean IT workers. He pled guilty on November 13, 2025, and was sentenced on March 19, 2026 to three years of probation, a $2,000 fine, and a $100 special assessment. The court also entered a preliminary order of forfeiture for a $409,876.30 money judgment, followed by a final order on January 22, 2026.

Audricus Phagnasay was charged by information in the Southern District of Georgia with wire fraud conspiracy, for allegedly letting overseas IT workers use his identity and company laptops at his home to get remote jobs with at least ten U.S. companies, which paid over $680,000 in salary, in a scheme the information ties to North Korean IT workers. He pled guilty to the sole count on November 13, 2025, under a plea agreement, and the court entered a final order of forfeiture on January 22, 2026. Phagnasay was sentenced on March 19, 2026 to three years of probation, a $2,000 fine, and a $100 special assessment.

Victoria Eduardovna Dubranova, a resident of Ukraine, and eight Russian-resident co-defendants were charged in the Central District of California with conspiracy under 18 U.S.C. § 371 to damage protected computers through DDoS attacks, with a forfeiture allegation under 18 U.S.C. § 1030. The indictment describes NoName057(16) as a group that attacked critical infrastructure and other victims worldwide in support of Russia's geopolitical interests, using its DDoSia program. It alleges Dubranova served as a Telegram administrator and helped create promotional recruitment videos, and ties the group to a Russian government-established IT organization, CISM, whose CEO and other staff are co-defendants. The court granted an ex parte application to seal the indictment and related documents on August 21, 2025 (entry 44); some subsequent docket activity may not be publicly visible.

Angelo Martino, a ransomware negotiator at a Chicago-based incident response company, was charged in the Southern District of Florida with conspiracy to interfere with interstate commerce by extortion. The information alleges he fed confidential client negotiation details to ALPHV BlackCat ransomware actors and helped attack other victims as an affiliate, with ransom payments from single victims reaching approximately $26,793,000. Martino pled guilty to the sole count and was sentenced on July 9, 2026 to 70 months in prison, three years of supervised release, and a $100 special assessment. A preliminary order of forfeiture was entered, and restitution was deferred, with a restitution hearing originally set for September 17, 2026.

Aleksei Olegovich Volkov, who admitted in his plea agreement to serving as the initial access broker for the Yanluowang ransomware group, pled guilty in the Southern District of Indiana to conspiracy to commit computer fraud and conspiracy to commit money laundering, charges transferred from the Eastern District of Pennsylvania. On March 23, 2026, he was sentenced to concurrent 47-month terms, to run concurrently with his sentence in related case 1:23-cr-00119, followed by two years of supervised release, with a $200 special assessment and $9,167,198.19 in restitution to six victims. The court also entered a preliminary order of forfeiture covering a laptop, an iPhone, and a USB drive, along with a $1,552,023.00 forfeiture money judgment.

Deniss Zolotarjovs, who used the handle "Sforza_cesarini," was charged in the Southern District of Ohio with money laundering conspiracy, wire fraud conspiracy, and Hobbs Act extortion conspiracy over ransomware attacks on companies from August 2021 through December 2023. An earlier complaint tied him to the Karakurt ransomware group's extortion of victims. He pled guilty to the money laundering and wire fraud conspiracy counts, and the court dismissed Count 3 on the government's motion. On May 4, 2026, he was sentenced to 102 months in prison, 36 months of supervised release, and a $200 special assessment, and the amended judgment ordered $56,551,689.19 in restitution plus forfeiture.

Xu Zewei, a general manager of Shanghai Powerock Network Co. Ltd., was charged in the Southern District of Texas, along with Zhang Yu, in a nine-count indictment. It alleges computer intrusions between February 2020 and June 2021 and charges conspiracy to damage and obtain information from protected computers, wire fraud, and aggravated identity theft. The government alleges he worked with officers of China's Shanghai State Security Bureau to target U.S. universities' COVID-19 research and, later, U.S. organizations through Microsoft Exchange vulnerabilities. The indictment names four victims. Xu was arrested in Italy on July 3, 2025, and extradited to the United States on April 25, 2026. A pretrial conference is set for June 17, 2027, and a jury trial for June 21, 2027.

Brothers Muneeb and Sohaib Akhter were charged in a superseding indictment alleging that, after being fired from a federal government contractor, they conspired to delete about 96 government databases and steal and destroy data. Muneeb is also charged with wire fraud and identity theft, and Sohaib with password trafficking, firearm possession by a prohibited person and witness tampering. Muneeb pled guilty to Counts 2, 3, 9 and 10 (computer damage, obtaining information, wire fraud). The court denied his motion to withdraw the plea on November 4, 2026, and his sentencing is set for December 16, 2026. Sohaib was convicted at trial of conspiracy, password trafficking and firearm possession and acquitted of witness tampering. The court denied his new-trial motion on November 5, 2026, and his sentencing is set for December 9, 2026.

4:24-cr-00016 (E.D.N.C.) — Sina Gholinejad was charged in the Eastern District of North Carolina with computer-fraud, extortion, wire-fraud, and money-laundering offenses. The indictment alleges he took part in a conspiracy that deployed "Robbinhood" ransomware against city governments, health care organizations, and companies, causing tens of millions of dollars in losses. He pled guilty on May 27, 2025 to intentional damage to protected computers (the City of Baltimore attack) and conspiracy to commit wire fraud, and the remaining counts were dismissed. On November 3, 2025, he was sentenced to 72 months imprisonment, three years supervised release, $14,655,096.24 in restitution to multiple victims, and a $200 special assessment. He has appealed.

25-4607 (4th Cir.) — Sina Gholinejad is appealing his conviction for intentional damage to protected computers and conspiracy to commit wire fraud, to which he pled guilty after being sentenced to 72 months in prison, three years of supervised release, and $14,655,096.24 in restitution. The charges arose from a conspiracy that the indictment says deployed "Robbinhood" ransomware against cities and organizations, including Baltimore, causing tens of millions of dollars in losses. The five other counts were dismissed at sentencing. In the appeal, the opening brief was due March 17, 2026, the response brief was due April 7, 2026, and the reply brief was filed by June 12, 2026.

Volodymyr Tymoshchuk, a Ukrainian citizen who used aliases including "farnetwork," and co-defendant Artem Stryzhak were charged in the Eastern District of New York in a superseding indictment over ransomware schemes. Tymoshchuk is charged with computer-fraud conspiracies, intentional damage to protected computers, and extortion threats tied to LockerGoga, MegaCortex and Nefilim ransomware, including alleged compromises of more than 250 U.S. companies. Stryzhak was charged only in the Nefilim conspiracy count, as an affiliate. Stryzhak pled guilty on December 19, 2025 to that count, conspiracy to commit fraud and related activity in connection with computers. On October 27, 2026 he was sentenced to 35 months in prison, consecutive to his sentence in case 25-cr-381, plus two years of supervised release, a $100 special assessment, and restitution. A final order of forfeiture covers his seized Apple MacBook Pro.

Oleksii Lytvynenko was charged in the Middle District of Tennessee with conspiracy to violate the Computer Fraud and Abuse Act and conspiracy to commit wire fraud, for his alleged role in the Conti ransomware conspiracy, which the indictment says claimed attacks on more than nine hundred victims worldwide, including a Tennessee government entity and two businesses. He pled guilty to conspiracy to commit wire fraud, and the other count was dismissed on the government's motion. He was sentenced on September 10, 2026 to 48 months in prison, with credit for time served in Ireland since July 2023, no supervised release, no fine, and a $100 special assessment. Forfeiture was ordered, and an amended judgment was entered on November 9, 2026. A restitution hearing is scheduled for November 16, 2026.

Artem Aleksandrovych Stryzhak, a Hive ransomware affiliate living outside the United States according to the indictment, was charged in an indictment from the Middle District of Florida, transferred to the Eastern District of New York under Rule 20, with conspiracy to commit computer fraud and extortion and with extortion involving a protected computer. The indictment alleges he attacked about seven victims, in a scheme Hive conspirators claimed hit roughly 1,500 victims worldwide. He pled guilty to the conspiracy count on December 19, 2025, and on October 27, 2026 was sentenced to 35 months in prison, consecutive to his sentence in case 23-cr-324, plus two years of supervised release, a $100 special assessment and $37,281.25 in restitution. The extortion count was dismissed on the government's motion, and a seized MacBook Pro was forfeited.

Roman Berezhnoy, a Russian national residing outside the United States, was charged in a superseding indictment in the District of Maryland with conspiracy, wire fraud conspiracy, wire fraud, and several computer-crime offenses, including intentional damage to a protected computer and extortion-related demands and threats. The indictment alleges he and co-defendant Egor Nikolaevich Glebov operated as part of a cybercrime group using Phobos ransomware under the name "8Base." It alleges the group victimized more than 1,000 public and private entities and obtained ransom payments exceeding $16 million. The charged victims include Maryland healthcare providers, a law firm, and school systems.

The United States filed a civil forfeiture action in the Central District of California against Virtual Currency and $2,061,517.68 in U.S. currency, alleging the assets are traceable proceeds of, and were involved in laundering, ransoms from the Qakbot malware conspiracy that the complaint says Rustam Gallyamov led. The complaint alleges Qakbot infected hundreds of thousands of computers and that ransomware groups paid Gallyamov a share of victims' ransoms; he is separately indicted in a criminal case. On April 3, 2026, the court granted default judgment against Gallyamov's interests in the defendant currency after he filed no claim or answer, extinguishing and forfeiting those interests to the United States. That judgment does not resolve the claims of Concord Music Group, DISH Network, Minto Holdings, and Marathon Fasteners.

Patrick Schmitz, a German citizen alleged to have lived in Colombia and to have used the aliases "William Gibson" and "PapaLegba," was charged in the District of New Jersey with eight counts, including running a continuing criminal enterprise, conspiracy to distribute and import heroin, access device fraud conspiracy, and money laundering conspiracy. The indictment alleges he co-founded and helped run The Versus Project, a dark web marketplace that operated from about November 2019 to May 2022 and ended with over 380,000 registered users, over 32,000 listings, and nearly 600,000 orders. It also alleges he recruited vendors, supervised staff, and shared in profits from transactions worth millions of dollars. A status conference was held on October 13, 2026.

26-1049 (D.C. Cir.) — Anthropic PBC filed a petition for review in the D.C. Circuit challenging the Department of War's March 2026 determination under 41 U.S.C. § 4713 that its products present a national-security supply chain risk. It alleges the action was retaliation for protected speech in violation of the First and Fifth Amendments, was arbitrary and capricious, and exceeded statutory authority. After oral argument on May 19, 2026, the court denied the petitions for review on September 25, 2026, including a consolidated later petition (No. 26-1162), in an opinion by Judge Katsas, over a dissent by Judge Henderson. Anthropic petitioned for rehearing by the panel or en banc on October 13, 2026, and respondents' response is due November 18, 2026.

3:26-cv-01996 (N.D. Cal.) — Anthropic PBC filed a lawsuit in the Northern District of California against the Department of War and other federal agencies. It alleges that the President's February 27, 2026 directive to stop all federal use of its Claude AI, Secretary Hegseth's "supply chain risk" designation, and a ban on defense contractors doing business with it were unlawful retaliation. The dispute arose after Anthropic refused to drop its restrictions on lethal autonomous warfare and mass surveillance of Americans. On March 26, 2026, the court granted a preliminary injunction blocking the directives and the designation. On August 27, 2026, the court granted summary judgment to Anthropic on its First Amendment, due process, and APA claims. It ruled for defendants on the ultra vires separation-of-powers claim and certain claims against agency defendants, and judgment was entered.

26-2011 (9th Cir.) — Anthropic PBC is the appellee in this Ninth Circuit appeal from its Northern District of California suit (No. 3:26-cv-01996) against the Department of War. The suit challenges the Secretary of War's separate supply-chain-risk designation under 10 U.S.C. § 3252, which Anthropic argues violates statutory limits, due process and the First Amendment. A preliminary injunction schedule set mediation and briefing dates, but the April 30 and May 28, 2026 brief deadlines were cancelled. Appellants must file a motion for appropriate relief within 21 days after resolution of the parallel D.C. Circuit case, if the stay remains in effect. In that § 4713 case, the D.C. Circuit denied the petitions for review on September 25, 2026, in an opinion by Judge Katsas over Judge Henderson's dissent, and Anthropic sought rehearing en banc on October 13, 2026.

Charles McGonigal, a former FBI Special Agent in Charge of counterintelligence in New York, was charged with co-defendant Sergey Shestakov with conspiracy to violate IEEPA sanctions, money laundering and related offenses. The indictment alleged they investigated a rival of sanctioned Russian oligarch Oleg Deripaska in 2021 in return for concealed payments. McGonigal pled guilty on August 15, 2023 to a one-count superseding information charging conspiracy to violate IEEPA and commit money laundering, and the underlying counts were dismissed. He was sentenced on December 14, 2023 to 50 months in prison, three years of supervised release, and a $40,000 fine, with a $100 special assessment and a $17,500 forfeiture money judgment.

Linwei Ding, a former Google software engineer, was charged in the Northern District of California with seven counts of theft of trade secrets and seven counts of economic espionage. The second superseding indictment alleges he uploaded more than 1,000 files of Google's AI chip and supercomputing trade secrets while affiliated with PRC-based companies. A jury found him guilty on all counts on January 29, 2026, but the court granted a judgment of acquittal on the economic espionage counts on August 20, 2026, finding insufficient evidence of intent to benefit the Chinese government when the uploads occurred. Ding was sentenced on the seven theft counts to 12 months minus one day in prison, two years of supervised release, $189,098.01 in restitution to Google, a $2,500 fine and a $700 assessment, with surrender set for December 1, 2026.

3:23-cr-01471 (S.D. Cal.) — Jinchao Wei, a U.S. Navy Machinist's Mate on the U.S.S. Essex, was charged in a superseding indictment with conspiracy to communicate and communicating defense information to aid China, conspiracy to export and exporting defense articles without a license, and naturalization fraud. The indictment alleges he passed Navy ship manuals and other information to a PRC intelligence officer in exchange for payments. After a jury trial, the jury returned its verdict on August 20, 2025, and Wei was convicted at trial on the espionage and export counts and acquitted of naturalization fraud. On January 12, 2026, he was sentenced to 200 months in prison on each of six counts, to run concurrently, followed by three years of supervised release, with a $600 special assessment and no fine. He has appealed.

26-399 (9th Cir.) — Jinchao Wei, a former Navy Machinist's Mate assigned to the U.S.S. Essex, is appealing his conviction for conspiracy to commit espionage, espionage, conspiracy to export defense articles without a license, and three counts of exporting defense articles without a license, after being convicted at trial and sentenced to 200 months in prison, three years of supervised release, and a $600 special assessment. The superseding indictment alleged he passed Navy ship manuals and other defense information to a Chinese intelligence officer in exchange for payments; the jury found him not guilty of naturalization fraud. In the appeal, the appellant's opening brief and the government's answering brief were due September 18 and October 19, 2026, and a reply brief is due November 10, 2026.

Eileen Wang was charged by information in the Central District of California with acting in the United States as an illegal agent of a foreign government, the People's Republic of China, in violation of 18 U.S.C. § 951, from about 2020 through at least December 2022. Under a plea agreement, she agreed to plead guilty to the single count. The agreed facts state that, at the direction of PRC officials, she and Yaoning "Mike" Sun ran a website called U.S. News Center that posted pro-PRC content, and that she was elected to the Arcadia City Council in November 2022. A change of plea hearing was held May 29, 2026, and sentencing was originally set for October 6, 2026.

1:26-cr-00256 (N.D. Ga.) — Tommy Shad English, CEO of a Georgia-based technology distributor, was charged by criminal information in the Northern District of Georgia with attempting to export at least 600 servers containing H100 GPUs to China without a Commerce Department license, in violation of the Export Control Reform Act. A criminal complaint had earlier alleged that he conspired with Stanley Zheng and Matthew Kelly to route export-controlled servers to China through Thailand, including an October 2023 order for 750 servers worth over $170 million. English was arraigned on June 10, 2026, and a motion hearing was held on August 31, 2026. A pretrial conference was originally set for October 30, 2026.

1:26-cr-00221 (N.D. Ga.) — Matthew Kelly, who operates a New York-based company, was charged by criminal complaint in the Northern District of Georgia with conspiring with Stanley Yi Zheng and Tommy Shad English to smuggle export-controlled goods and violate the Export Control Reform Act. The complaint alleges the group sought to obtain advanced GPU servers from U.S. companies and route them to China through Thailand without an export license, including an October 2023 order of 750 servers worth over $170 million. Kelly pled guilty to Count 1 of an information on July 9, 2026, and sentencing is scheduled for December 10, 2026.

1:26-cr-00271 (N.D. Ga.) — Stanley Yi Zheng was charged by criminal complaint in the Northern District of Georgia with conspiring with Tommy Shad English and Matthew Kelly, from about May 2023 to May 2024, to smuggle export-controlled GPU servers containing H100 chips from the United States to China via Thailand without a license. The charge is conspiracy under 18 U.S.C. § 371, aimed at smuggling and Export Control Reform Act violations. The complaint alleges false end-user certifications for Thai companies and an October 2023 order of 750 servers worth over $170 million, with about $26.9 million wired in payments. Zheng waived indictment on June 12, 2026, when an information was filed, and a change-of-plea hearing was originally set for July 28, 2026. He is in custody.