US Disrupts Chinese Hacking Operation Targeting Sensitive Government Agencies

The US Justice Department has announced that it has disrupted a Chinese hacking operation that compromised several sensitive government agencies and private networks. The operation, which started in 2018, was responsible for break-ins and attempts on the U.S. Justice Department, NASA, the Federal Reserve, the Senate, and other sensitive government agencies.

The hackers used tools developed to compromise critical infrastructure and other sensitive networks worldwide. They gained access to various levels, with some attempts being successful while others were not. For instance, they attempted to gain access to NASA networks in August 2019 by targeting a virtual private network vulnerability but failed.

According to the affidavit, the hackers carried out intrusions at three unnamed Energy Department laboratories, the NIH, an unnamed HHS agency, and a U.S. security device manufacturer in September 2024. The Justice Department said it had seized domains used by two hacking platforms, dubbed QScan and QTRouter, which were part of the campaign.

Experts say private contractors routinely carry out high-profile intrusions on behalf of various Chinese government agencies. Over the last decade, the number of companies offering niche offensive services has exploded, according to Dakota Cary, a China analyst with cybersecurity company SentinelOne.