US Disrupts Chinese Hacking Operation Targeting Government Agencies

The US Department of Justice has announced the disruption of a Chinese hacking operation that targeted several sensitive government agencies, including the Justice Department, NASA, and the Federal Reserve. According to the DOJ, the hackers used tools developed by a China-based firm, Nanjing Xinjiuwei Network Technology Company, which had clients that included China's civilian intelligence agency and its military. The affidavit stated that the hackers compromised critical infrastructure and sensitive networks in the US and worldwide since at least 2018.

The hacking campaign was carried out through two platforms, QScan and QTRouter, which were seized by the DOJ. The hackers attempted to gain access to NASA networks in August 2019 but were unsuccessful. In September 2024, they carried out intrusions at three unnamed Energy Department laboratories, the NIH, an unnamed HHS agency, and a US security device manufacturer.

Experts who follow Chinese cyber activity say that private contractors often carry out high-profile intrusions on behalf of various Chinese government agencies. Dakota Cary, a China analyst with cybersecurity company SentinelOne, stated that 'over the last decade, the number of companies offering niche offensive services has exploded.'