The FBI and the US Department of Justice seized three internet domains used by two hacking platforms, QScan and QTRouter, linked to a group called QTFY and the Chinese company Nanjing Xinjiuwei Network Technology Company. In May 2024 alone, QScan executed over 2 million scanning and exploitation tasks, compromising more than 300 US organizations in a single day by exploiting a vulnerability in Check Point software. The group provided hacking-as-a-service to Chinese government entities, including the Ministry of State Security and the People’s Liberation Army, targeting NASA, the Federal Reserve, and the US Senate. These activities date back to at least 2018, meaning they operated for approximately eight years before this enforcement action. This seizure is part of a broader crackdown on PRC-linked cyber threats, following the dismantling of the Flax Typhoon botnet and the removal of PlugX malware from over 4,000 US computers.
Source: Read the original article
