Shafaqna Pakistan: The United States said on Wednesday that it had disrupted a Chinese hacking campaign that targeted or attempted to infiltrate the Justice Department, NASA, the Federal Reserve, the Senate and other sensitive government agencies.
In a statement, the Justice Department said it had seized domains linked to two hacking platforms, QScan and QTRouter, which were allegedly used to support the cyber campaign.
According to an affidavit, the alleged hackers also targeted the US Department of Energy, Department of Health and Human Services, National Institutes of Health, as well as four unnamed companies in the United States and South Korea.
A spokesperson for the Chinese Embassy in Washington said in an email that they were not familiar with the specific allegations outlined by the Justice Department. However, the spokesperson said the Chinese government “firmly opposes and combats all forms of cyberattacks in accordance with the law.”
The US uses cybersecurity issues to “smear or discredit China,” the spokesperson said, and China “opposes the U.S. overstretching the concept of national security and using it as a pretext to impose discriminatory restrictions on Chinese companies and will firmly safeguard the legitimate rights and interests of Chinese companies.”
The Justice Department said the platforms were run by a China-based firm, the Nanjing Xinjiuwei Network Technology Company, whose clients it said included China’s civilian intelligence agency, the Ministry of State Security, and its military, the People’s Liberation Army.
Nanjing Xinjiuwei did not immediately respond to a request for comment outside normal business hours.
HACK ATTEMPTS STARTED IN 2018
The affidavit said the hackers used tools they developed to compromise critical infrastructure and other sensitive networks in the U.S. and worldwide since at least 2018.
The affidavit said that not all their attempts to gain access were successful. The hackers unsuccessfully attempted to gain access to NASA networks in August 2019 by targeting a virtual private network vulnerability.
In September 2024, the hackers carried out intrusions at three unnamed Energy Department laboratories, the NIH, an unnamed HHS agency, and a U.S. security device manufacturer, according to the affidavit.
A joint cybersecurity advisory, opens new tab issued by the FBI, NSA and U.S. Cyber Command’s Cyber National Mission Force detailed multiple hacking efforts over the years. These included successful data theft from unnamed defense contractors, financial institutions and universities in May 2024.
The hackers also scanned for vulnerabilities and made unsuccessful attempts to access networks of the U.S. Senate and a U.S. hospital in March 2026.
A NASA spokesperson said the agency does not comment on specific incidents, and the Department of Health and Human Services referred questions to the DOJ. The DOJ did not respond to a request for additional detail.
Chinese-linked hacking campaigns have compromised a string of sensitive U.S. government and private networks in recent years. In March, the FBI notified Congress that hackers had penetrated certain agency networks related to people under FBI investigation, with public reporting later attributing the compromise to China. Chinese-linked hackers have also been tied to a compromise of certain U.S. House of Representatives committee networks, as well as multiple major telecommunications companies in recent years.
Ex
perts who follow Chinese cyber activity say private contractors routinely carry out high-profile intrusions on behalf of various Chinese government agencies.
“Over the last decade, the number of companies offering niche offensive services has exploded,” said Dakota Cary, a China analyst with cybersecurity company SentinelOne.
Source: Dunya News
