- US seized internet domains allegedly used by Chinese state-linked hackers and platforms QScan and QTRouter.
- Authorities tied the domains to QTFY, an alleged state-sponsored hacking group.
- Victims included NASA, the Federal Reserve, the US Senate, Energy, Justice, and HHS.
- Private targets reportedly included hospitals, universities, telecoms, power companies, financial firms, and defense contractors.
- Officials said the operation disrupted a global botnet, and QTFY offered paid hacking services to MSS and the PLA.
US law enforcement on Tuesday announced the seizure of internet domains allegedly used by Chinese hackers to target government agencies and critical infrastructure.
The Justice Department and FBI said the seized domains were used by a Chinese state-sponsored hacking group known as “QTFY” and by hacking platforms known as “QScan” and “QTRouter.”
Victims of QTFY computer intrusion activity included NASA, the Federal Reserve, the US Senate and the departments of energy, justice, and health and human services, they said.
Private sector targets allegedly included hospitals, universities, telecom providers, power companies, financial institutions and defense contractors.
“Federal law enforcement investigated and disabled the PRC’s malicious software, the latest in a series of technical operations to dismantle indiscriminate hacking activities sponsored by the People’s Republic of China,” Attorney General Todd Blanche said in a statement.
FBI Director Kash Patel said the operation resulted in the disruption of a “global botnet and hacking platform used by Chinese state-sponsored hackers to target US critical infrastructure.”
QTFY offers computer hacking services to paying customers, according to court documents, including the Chinese Ministry of State Security and People’s Liberation Army.
The United States and several other countries frequently condemn what they say is state-backed Chinese hacking activity of governments, militaries and businesses.
Beijing rejects the allegations.
Add Comment