US Foils China-Linked Cyberattack Targeting NASA, Federal Reserve, Senate

The United States has disrupted what it described as a China-linked cyber operation targeting sensitive government networks, including those of the Justice Department, NASA, the Federal Reserve and the US Senate.

The US Justice Department said the operation involved two hacking platforms, QScan and QTRouter, and authorities had seized domains associated with the infrastructure. According to an affidavit, the campaign also targeted the Department of Energy, the Department of Health and Human Services, the National Institutes of Health, as well as four unidentified companies in the United States and South Korea.

China-Based Firm Allegedly Behind Operation

The Justice Department identified China-based Nanjing Xinjiuwei Network Technology Company as the operator of the two platforms.

US authorities alleged that the company provided services to China’s Ministry of State Security, the country’s civilian intelligence agency, as well as the People’s Liberation Army.

The US government said the company’s technology was used by hackers linked to Chinese military and intelligence organisations to mask their activities, infiltrate targeted networks and conduct cyber operations against US government agencies.

Reuters reported that it was unable to immediately locate contact information for the Chinese company.

Hacking Infrastructure Traced to 2018

According to the affidavit, the infrastructure associated with the hacking platforms had been used since at least 2018 to compromise critical infrastructure and other sensitive networks in the US and other countries.

Cybersecurity experts who monitor Chinese hacking activity said private contractors are increasingly being used to conduct sophisticated cyber operations on behalf of Chinese government agencies.

Dakota Cary, a China analyst at cybersecurity firm SentinelOne, said the number of companies providing specialised offensive cyber services had grown sharply over the past decade.

China Yet to Comment

The Chinese Embassy in Washington did not immediately respond to requests for comment on the US allegations.

Beijing has repeatedly rejected accusations that it sponsors or conducts cyberattacks against foreign governments and organisations.