The Justice Department and the FBI say they disrupt a China-linked hacking operation by seizing internet domains associated with two malware platforms, “QScan” and “QTRouter.” Authorities say the platforms were used in a long-running cyber campaign targeting multiple U.S. government networks, including the Justice Department, NASA, the Federal Reserve, and the U.S. Senate.
Officials and reports describe the activity as connected to a Chinese state-sponsored hacking group known as QTFY, which they say is associated with a Nanjing-based company. According to court documents summarized by outlets, QTFY developed and operated the tools and provided access or hacking services to clients, including China’s Ministry of State Security. Outlets largely focus on the domain seizures and the named targets, while some emphasize the campaign’s breadth, citing alleged interest in additional government departments and some private-sector organizations.
Across coverage, the core claim is consistent: U.S. law enforcement takes technical action to disable the identified platforms and cut off access to the malware used against U.S. institutions. No outlets provide evidence of successful intrusions beyond what authorities allege in their statements and supporting materials.
