The United States announced that it had disrupted a Chinese cyber-espionage campaign linked to breaches of several sensitive government agencies, including the US Justice Department, NASA, the Federal Reserve and the US Senate.
In a statement, the Justice Department reported that it had seized domains used by two hacking platforms, QScan and QTRouter, which it identified as part of the operation.
The Justice Department said that the platforms were run by the China-based Nanjing Xinjiuwei Network Technology Company, whose clients included China’s civilian intelligence agency, the Ministry of State Security, and its military, the People’s Liberation Army. An affidavit named the US Department of Energy, the Department of Health and Human Services, the National Institutes of Health, and four unnamed companies in the US and South Korea among the victims. Reuters was unable to immediately find contact information for the company.
“Over the last decade, the number of companies offering niche offensive services has exploded,” said Dakota Cary, a China analyst at the cybersecurity firm SentinelOne. Experts who monitor Chinese cyber operations noted that private contractors frequently carry out high-profile intrusions for different Chinese government agencies.
