🚨FBI Seizes Chinese Cyber Hacking Tools Used on NASA, Senate
Chinese hackers' tools taken down, impacting US agencies
TL;DR
The FBI seized two hacking platforms used by Chinese cyber operatives to attack US government agencies and critical networks. QScan and QTRouter, linked to QTFY, have been in use since 2018, compromising NASA, the Senate, and more.
The FBI has seized two hacking platforms, QScan and QTRouter, used by Chinese cyber operatives to attack US government agencies and critical networks since 2018. QScan scans and infects IoT devices, while QTRouter hides the origin of cyber activities. This disruption affects numerous US agencies, including NASA, the Senate, and the Department of Energy. The FBI's actions have made these hacking services inoperable, impacting thousands of compromised devices and networks.
Key Points
QScan and QTRouter were created by QTFY, a group backed by the People's Republic of China, since 2018.
QTFY's hackers work for Nanjing Xinjiuwei, a private company receiving payments from China's Ministry of State Security.
QTRouter consists of compromised IoT devices, commercial proxy service devices, and leased virtual private servers.
The FBI seized three domains linked to QTFY: qtproxy.xyz, qt-proxy.org, and qt-team.com, making the services inoperable.
QTFY broke into computers at three DOE National Laboratories, NIH, and a US security device manufacturer in 2024.
Why It Matters
If you're in charge of cybersecurity for a US government agency or critical infrastructure, QTFY's disruption means fewer threats from Chinese-backed hackers. However, the FBI's actions only affect QScan and QTRouter, leaving other Chinese cyber groups operational.
Frequently Asked Questions
Why does this matter?
If you're in charge of cybersecurity for a US government agency or critical infrastructure, QTFY's disruption means fewer threats from Chinese-backed hackers. However, the FBI's actions only affect QScan and QTRouter, leaving other Chinese cyber groups operational.
What happened?
The FBI seized two hacking platforms used by Chinese cyber operatives to attack US government agencies and critical networks. QScan and QTRouter, linked to QTFY, have been in use since 2018, compromising NASA, the Senate, and more.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,339 builders reading daily.