Chinese-backed Hackers Target Major U.S. Agencies, Says Court Files
Aisha Mensah | AA
Chinese state-backed hackers used sophisticated platforms to target NASA, the Federal Reserve, and other significant US institutions, prompting a halt to their operations, according to court documents unsealed Wednesday.
Chinese state-sponsored hackers employed advanced cyber tools to target vital U.S. agencies including NASA, the Federal Reserve, and the Justice Department, as revealed in court documents released on Wednesday. The hackers further sought to infiltrate the U.S. Senate.
According to the documents, additional targets among U.S. institutions were the Energy Department, the Department of Health and Human Services, and the National Institutes of Health. The Justice Department specified these targeted entities in their report.
The U.S. authorities took action by seizing three domains controlled by the QScan and QTRouter platforms, effectively disrupting their operations. These platforms were linked to a Chinese group known as QTFY, alleged to have collaborated with Nanjing Xinjiuwei Network Technology Company.
Details of the Chinese Hacking Platforms
The FBI affidavit filed in the Southern District of California accused QTFY of orchestrating cyber activities on behalf of the Chinese government. Payments for these actions reportedly came from China's Ministry of State Security.
QTFY provided hacking services to high-profile clients including the Ministry of State Security and the People’s Liberation Army, according to the affidavit. The QScan platform scanned the global internet for vulnerabilities, infecting thousands of devices.
Once compromised, devices were integrated into QTRouter, a network designed to mask the origin of cyberattacks by making them appear as though they came from legitimate local sources, adding complexity to the digital espionage.
Impact Beyond Federal Targets
The scope of the hacking group extended beyond federal agencies. Hospitals, telecommunications providers, power companies, financial institutions, and defense contractors were also listed among the targets.
An attempted breach into NASA’s systems in 2019 prompted an FBI investigation. While the attack did not succeed due to timely security updates by NASA, it emphasized the ongoing threat posed by such cyber espionage.
Highlighting the severity of the situation, U.S. Attorney General Todd Blanche disclosed the extent of the operation that dismantled the Chinese state-sponsored malware. FBI Director Kash Patel noted the achievement as the disruption of a 'global botnet and hacking platform.'
Analyzing Cybersecurity in Urban Infrastructures
The revelation of Chinese-backed cyberattacks on critical U.S. agencies underscores the significant cybersecurity risks faced by cities, as these vulnerabilities may extend to municipal governance and infrastructure control systems. Such cases highlight the necessity for robust municipal cybersecurity protocols.
Local governments must enhance their cyber defenses to protect essential services such as transportation systems, water supply networks, and emergency response units from similar infiltrations. This is crucial in ensuring the stability and safety of urban living.
Furthermore, city leaders need to collaborate with federal agencies and private sector experts to establish proactive measures and coordinated responses to potential cyber threats. By doing so, cities can fortify their infrastructures and protect the public against digital intrusions.
Questions That Matter
What agencies were targeted by Chinese hackers?
The targeted agencies included NASA, the Federal Reserve, the Justice Department, and the US Senate. Additionally, attacks were aimed at the Energy Department, the Department of Health and Human Services, and the National Institutes of Health.
What did the US authorities do in response?
US authorities seized three domains utilized by the QScan and QTRouter platforms, rendering these systems inoperable. This action was part of an operation involving the FBI and the Justice Department to dismantle these cyber threats.