Fed, NASA, DOJ Among Victims of Chinese Hacker Group, Court Documents Reveal

The Federal Reserve, the U.S. Senate, the Department of Justice, NASA, and other federal agencies have fallen victim to computer intrusions orchestrated by a Chinese state-sponsored hacking group. The U.S. Department of Justice announced on Wednesday the seizure of online domains that facilitated these hacking operations.

These platforms, identified as 'QScan and QTRouter,' were reportedly used to target critical U.S. infrastructure and other sensitive networks. The DOJ stated that a court filing indicated that other networks compromised included those operated by hospitals, telecommunications providers, power companies, financial institutions, and defense contractors.

Additional federal agencies affected by these intrusions, according to the DOJ, include the Department of Energy, the Department of Health and Human Services, and the National Institutes of Health.

Unsealed court documents filed in California federal court identified a Chinese state-sponsored group known as 'QTFY' as the creator and operator of the hacking platform. Filings suggest that QTFY was employed by Nanjing Xinjiuwei Network Technology Company, a China-based firm.

Attorney General Todd Blanche issued a statement asserting, "State-sponsored malicious hackers preying on America's critical infrastructure will be stopped and prosecuted. We are here to ensure security for the American people and will use every tool we have to keep that promise."

"Federal law enforcement investigated and disabled the PRC's malicious software, the latest in a series of technical operations to dismantle indiscriminate hacking activities sponsored by the People's Republic of China," Blanche added.

Fed, NASA, and DOJ Targeted by Chinese Hacker Group, Court Documents Show

The Federal Reserve, NASA, and the Department of Justice are among the U.S. federal agencies that have been victims of computer breaches by a Chinese state-sponsored hacking collective, as disclosed by the Department of Justice on Wednesday. This announcement coincided with the seizure of online domains associated with their hacking operations.

The hacking tools, known as 'QScan and QTRouter,' were instrumental in targeting vital U.S. infrastructure and other sensitive networks. A court filing further elaborated that the compromised networks extended to hospitals, telecommunications companies, energy providers, financial firms, and defense contractors.

The Department of Justice also confirmed that the Department of Energy, the Department of Health and Human Services, and the National Institutes of Health were among the federal entities affected by these cyber intrusions.

Court documents, now public in a California federal court, revealed that 'QTFY,' a Chinese state-backed group, was responsible for developing and operating the hacking platform. According to the filings, QTFY was linked to Nanjing Xinjiuwei Network Technology Company, a company based in China.

Attorney General Todd Blanche emphasized the administration's commitment to combating such threats, stating, "We will stop and prosecute state-sponsored malicious hackers who target America's critical infrastructure. Our priority is to safeguard the American people, and we will employ all available resources to uphold this commitment."

Blanche further commented, "Federal law enforcement has successfully investigated and neutralized the PRC's malicious software, marking a significant step in the ongoing efforts to dismantle the widespread hacking activities sponsored by the People's Republic of China."