**U.S. Disrupts Chinese‑Linked Hacking Operation Targeting Federal Agencies**
*Washington, D.C., August 28, 2026* — U.S. authorities announced that they have dismantled a hacking operation they say was directed by actors in China and was responsible for cyber intrusions into several high‑profile U.S. government entities.
The Justice Department disclosed on August 26 that it seized domain names associated with two illicit platforms, identified as “QScan” and “QTRouter.” According to an accompanying affidavit, the platforms were used to conduct a sustained cyber‑espionage campaign that compromised networks at the Department of Justice, the National Aeronautics and Space Administration (NASA), the Federal Reserve, and the U.S. Senate.
The affidavit further listed additional victims, including the Department of Energy, the Department of Health and Human Services, the National Institutes of Health, and four unnamed companies located in the United States and South Korea.
U.S. officials allege that the infrastructure behind the hacking platforms was operated by Nanjing Xinjiuwei Network Technology Company, a firm based in Nanjing, China. The Justice Department claims the company’s clientele included China’s civilian intelligence agency, the Ministry of State Security, as well as the People’s Liberation Army.
The indictment states that the group’s computer infrastructure has been employed to infiltrate critical infrastructure and other sensitive networks in the United States and abroad since at least 2018.
Chinese officials have not responded to requests for comment, and the Chinese government routinely denies involvement in cyber‑attacks of this nature.
Cybersecurity analysts note that private contractors in China often provide offensive cyber capabilities to state agencies. “Over the last decade, the number of companies offering niche offensive services has exploded,” said Dakota Cary, a China analyst with SentinelOne.
The Justice Department’s actions represent a coordinated effort to neutralize the identified domains and disrupt the alleged malicious activity. No public statement has been made regarding any arrests or further legal proceedings related to the operation.
Article and image source: hongkongherald.com
