U.S. Government Seizes Chinese Hacking Platforms Targeting Critical Infrastructure

On August 26, 2026, the U.S. Justice Department and FBI announced the seizure of domains associated with two hacking platforms, QScan and QTRouter, used by the Chinese state-sponsored hacking group QTFY. These platforms targeted U.S. critical infrastructure, including agencies such as NASA, the Federal Reserve, and the Department of Justice. QScan was designed to scan and infect IoT devices globally, while QTRouter managed the infected devices within a botnet. The seizure aims to disrupt the operations of PRC-linked cyber actors and protect national security. The DOJ emphasized its commitment to countering state-sponsored cyber threats. Court documents revealed that QTFY provided hacking services to entities like the PRC's Ministry of State Security. The current status is that the platforms have been shut down, denying access to the malicious actors.

Key Points: • The DOJ and FBI seized domains for QScan and QTRouter, used by Chinese hackers. • Victims include NASA, the Federal Reserve, and multiple federal agencies. • The seizure aims to disrupt a botnet targeting U.S. critical infrastructure.