US disrupts Chinese state-sponsored botnet targeting American critical infrastructure
The US Justice Department and Federal Bureau of Investigation announced on August 26 the disruption of a global botnet operated by Chinese state-sponsored group QTFY. The group, employed by China-based Nanjing Xinjiuwei Network Technology Company, created and operated two hacking platforms—QScan and QTRouter—to target US critical infrastructure and sensitive networks.
According to court documents unsealed in California, QTFY offered cyber-espionage services to paying customers including China's Ministry of State Security and the People's Liberation Army. The US authorities executed court-authorised domain seizures to deny the malicious actors access to these complementary hacking platforms.
