US says Chinese hackers breached DOJ, NASA and Senate
The Justice Department seized domains for the QScan and QTRouter hacking platforms, saying China-backed hackers hit US agencies since 2018.
By Sam Reyes · Published · Updated · 4 min read
The US Justice Department says Chinese state-sponsored hackers broke into the Justice Department, NASA, the Federal Reserve and the Senate, Reuters reports.
What the government did
- Seized domains used by two hacking platforms, QScan and QTRouter.
- Filed an affidavit naming further victims, including the Departments of Energy and Health and Human Services, the National Institutes of Health, and four US and South Korean companies.
- Said the hackers had targeted sensitive US and global networks since at least 2018.
Why it matters
The list of victims covers law enforcement, space, central banking and lawmakers — a sign of how broad China's intelligence collection is. Seizing infrastructure disrupts the operation and forces hackers to rebuild, though it rarely stops a state-backed group for long.
What it means for organizations
Government contractors and companies that work with these agencies are often used as stepping stones. They should:
- Patch internet-facing devices such as routers and VPNs quickly, as these are a favourite entry point for Chinese groups.
- Watch for unusual traffic to newly registered or unfamiliar domains.
