Reported by 5 outlets

Timeline

1. original reporting

   FBI disables China-linked hacking tools used against US agencies

   malware.news · 48d ago · August 26th, 2026

   The FBI seized three internet domains Wednesday that prosecutors say Chinese government-backed hackers used to target U.S. agencies, critical infrastructure and other networks. The Justice Department Office of Public Affairs | Justice Department and FBI Seize Platforms Operated and Used by China State-Sponsored Hackers to Target U.S. Critical Infrastructure | United States Department of Justice ”> attributed the tools, known as QScan and QTRouter, to a hacking group called QTFY. https://www.justice.gov/opa/media/1459096/dl?inline ”> Court records say the group operates through Nanjing Xinjiuwei Network Technology Company, a private Chinese firm that sold hacking services to China’s main civilian intelligence agency and its military. The group targeted networks belonging to NASA, the Federal Reserve, the National Institutes of Health, the U.S. Senate and the Energy, Justice and Health and Human Services departments, according to an FBI affidavit. Hospitals, telecommunications providers, power companies, banks and defense contractors were also targeted. The filing does not say that every attempted attack succeeded. A 2019 attempt against NASA, for example, failed because the agency had already fixed the

2. update from bleepingcomputer.com

   FBI disrupts proxy network enabling Chinese espionage operations

   bleepingcomputer.com · 48d ago · August 26th, 2026

   The FBI has disrupted infrastructure associated with a technical “quartermaster” that provided reconnaissance, proxy management, and operational routing capabilities for Chinese cyber espionage activities. Black Lotus Labs, the threat research arm of Lumen Technologies, has been tracking the infrastructure for the past year and discovered the components of the framework used in attacks against U.S. According to the researchers, the provider offers a reusable service consisting of four distinct operational elements: QScan : a reconnaissance component that identifies and profiles high-value targets, collecting open ports, application banners, operating-system fingerprints, and configuration data Fast Labyrinth : an encrypted relay network that conceals communications to and from victim organizations QTRouter : provides a preconfigured physical device that handles access to the proxy infrastructure and the node management system QTProxy : a management tool that lets users select relays and configure custom routes through Fast Labyrinth Overview of the quartermaster infrastructure Source: Lumen The infrastructure was used to profile and steal data from U.S. military and defense organizations, government networks, universities and research institutions, aerospace and bioinformatics organizations, healthcare orgs, financial firms, critical infrastructure and energy companies, and enterprise software vendors. “Lumen Technologies would like to commend the FBI

3. update from malware.news

   US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate

   malware.news · 48d ago · August 26th, 2026

   Jonathan Greig reports; Chinese government hackers used tools known as “QScan” and “QTRouter” to breach multiple federal agencies since 2018, the Department of Justice said in announcing the takedown of the platforms on Wednesday. The tools were run by China-based Nanjing Xinjiuwei Network Technology Company and used primarily by China’s Ministry of State Security and… Source Article Link: https://databreaches.net/2026/08/26/us-takes-down-alleged-chinese-hacking-tools-used-against-federal-reserve-doj-and-senate/

4. update from cyberscoop.com

   Officials disrupt Chinese espionage operation that hit multiple federal agencies

   cyberscoop.com · 48d ago · August 26th, 2026

   Federal authorities Wednesday revealed a multi-layered Chinese state-sponsored espionage operation that’s targeted and compromised U.S. Officials seized domains and unsealed an affidavit detailing how a Chinese government-funded front company assembled a botnet and complementary systems that allowed attackers to intrude highly sensitive networks. election system in June. The long-running operation, which officials obstructed by seizing malicious infrastructure, provided an expansive set of services. QTFY’s full hacking suite allowed attackers to scan and exploit vulnerabilities, infect IoT devices for a botnet, and conceal or reroute traffic. QTFY’s operation was comprehensive with features that provided continuous reconnaissance capabilities and flexibilities designed for specific targets or objectives, said Ryan English,

5. mentioned by securityweek.com

   US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks

   securityweek.com · 47d ago · August 27th, 2026

6. update from gbhackers.com

   FBI Seizes China State-Sponsored Hacker Platforms Used to Target U.S. Critical Infrastructure

   gbhackers.com · 47d ago · August 27th, 2026

   This court-authorized operation aims to disrupt attacks against U.S. Unsealed court documents from the Southern District of California revealed that these platforms were operated by a state-sponsored group […] The post FBI Seizes China State-Sponsored Hacker Platforms Used to Target U.S. Critical Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .