What did U.S. authorities seize in the crackdown on Chinese hackers?

U.S. law enforcement announced the seizure of internet domains allegedly used by Chinese hackers. The Justice Department and FBI said the domains were linked to the QTFY group and the QScan and QTRouter platforms.

Which organizations were reportedly targeted by the QTFY hacking activity?

Victims included NASA, the Federal Reserve, the U.S. Senate, and the departments of energy, justice, and health and human services. Private sector targets allegedly included hospitals, universities, telecom providers, power companies, financial institutions and defense contractors.

How did U.S. officials describe the operation against the hacking platform?

Attorney General Todd Blanche said federal law enforcement investigated and disabled the PRC’s malicious software. FBI Director Kash Patel said the action disrupted a global botnet and hacking platform used to target U.S. critical infrastructure.

US disrupts platforms allegedly used by Chinese hackers

Listen

Summary

U.S. law enforcement seized internet domains in Washington on Tuesday that were allegedly used by Chinese hackers to target government agencies and critical infrastructure. The Justice Department and FBI said the domains were tied to the Chinese state-sponsored group QTFY and hacking platforms QScan and QTRouter. Victims included NASA, the Federal Reserve, the U.S. Senate, and several federal departments, while private targets included hospitals, universities, telecom providers, power companies, financial institutions and defense contractors. Beijing rejected the allegations.

Key Facts

Court documents said QTFY offers computer hacking services to paying customers, including the Chinese Ministry of State Security and the People’s Liberation Army.
Attorney General Todd Blanche said federal law enforcement investigated and disabled the PRC’s malicious software through technical operations aimed at dismantling hacking activity sponsored by China.
FBI Director Kash Patel said the operation disrupted a global botnet and hacking platform used by Chinese state-sponsored hackers to target U.S. critical infrastructure.

By AFP

Published Aug 27, 2026 1:08 am KST

WASHINGTON — U.S. law enforcement on Tuesday announced the seizure of internet domains allegedly used by Chinese hackers to target government agencies and critical infrastructure.

The Justice Department and FBI said the seized domains were used by a Chinese state-sponsored hacking group known as "QTFY" and by hacking platforms known as "QScan" and "QTRouter."

Victims of QTFY computer intrusion activity included NASA, the Federal Reserve, the U.S. Senate and the departments of energy, justice, and health and human services, they said.

Private sector targets allegedly included hospitals, universities, telecom providers, power companies, financial institutions and defense contractors.

"Federal law enforcement investigated and disabled the PRC's malicious software, the latest in a series of technical operations to dismantle indiscriminate hacking activities sponsored by the People's Republic of China," Attorney General Todd Blanche said in a statement.

FBI Director Kash Patel said the operation resulted in the disruption of a "global botnet and hacking platform used by Chinese state-sponsored hackers to target U.S. critical infrastructure."

QTFY offers computer hacking services to paying customers, according to court documents, including the Chinese Ministry of State Security and People's Liberation Army.

The United States and several other countries frequently condemn what they say is state-backed Chinese hacking activity of governments, militaries and businesses.

Beijing rejects the allegations.

Explore More