US Seizes Domains from Chinese Hacking Group Targeting Critical Infrastructure

The FBI and DOJ have seized domains linked to a Chinese state-backed hacking group named QTFY, which has targeted US government agencies and critical infrastructure since 2018. The group, associated with Nanjing Xinjiuwei Network Technology Company, used a botnet to conduct cyberattacks against entities such as NASA, the Federal Reserve, and various federal departments. The seized domains were integral to the botnet's operations, effectively disabling its command-and-control capabilities. The attacks have raised significant concerns regarding the security of US critical infrastructure, with reports indicating that the group has been active for years, employing sophisticated methods to mask their activities. The DOJ's actions aim to disrupt ongoing cyber-espionage efforts attributed to the Chinese government. The FBI has also released advisories to help organizations defend against potential future attacks.

Key Points: • The QTFY group has targeted US agencies since 2018, affecting critical infrastructure. • Domains seized were essential for the botnet's command-and-control operations. • The DOJ's actions aim to disrupt ongoing cyber-espionage linked to the Chinese government.