A Chinese-based hacker and cybersecurity firm he worked for are sanctioned by the US Treasury Department for compromising 81,000 Sophos firewalls at companies worldwide.