China-linked hackers infiltrated US government networks before FBI takedown

Chinese state-linked hackers stole sensitive data from more than 300 organizations, including U.S.defense contractors, financial institutions and universities, and breached three Energy Department laboratories, the NIH and an HHS agency before the FBI knocked their hacking platforms offline this week, newly unsealed court records show.The group, known as QTFY, operated through a China-based company that the FBI says sold hacking services to clients including China’s Ministry of State Security and People’s Liberation Army.

Former PLA members worked for the company and used military relationships to secure contracts and subcontracts for offensive cyber operations, according to an FBI affidavit.QTFY paired mass internet scanning with a network of compromised routers, cameras and other internet-connected devices that helped disguise the origin of its attacks.FBI SAYS RUSSIAN HACKERS HIJACKED OLD WI-FI ROUTERSThe National Aeronautics and Space Administration (NASA) Headquarters is seen in Washington D.C., United States on September 15, 2023.(Celal Gunes/Anadolu Agency via Getty Images)By routing malicious traffic through devices near a victim’s network, the hackers could make attacks blend in with legitimate local traffic and become harder to trace, federal officials said.The Justice Department and FBI seized three domains Wednesday that powered QTFY’s two main platforms: QScan, which hunted for vulnerable systems, and QTRouter, which masked hackers’ identities by routing their traffic through compromised devices.Federal authorities said the seizures crippled both platforms by cutting off domains used for core communications and authentication.The scale was massive.AI IS NOW POWERING CYBERATTACKS, MICROSOFT WARNSOn a single day in 2024, QScan processed more than 2 million scanning and penetration-testing tasks, according to the FBI affidavit.

The platform contained more than 200 proof-of-concept exploits and searched the internet for vulnerable software, expo...