The US Rewards for Justice programme is offering up to $10m for information on Zhang Yu, who is accused of stealing COVID-19 research and conducting wider cyber intrusions.