FBI, NSA Take Down China-Linked Hacking Network Targeting U.S. Critical Infrastructure: NASA, Fed Among Targets

Key takeaways

• U.S. authorities have crippled a China‑linked hacking network that targeted critical infrastructure, removing its core tools and exposing its operations.
• QScan processed >2 million tasks in 2024
• QTFY stole data from >300 U.S. organizations
• QTFY linked to China’s Ministry of State Security and People’s Liberation Army

What happened

The FBI and NSA seized domains used by the China‑linked hacking network QTFY, shutting down its QScan scanning tool and QTRouter routing system, after a 2018‑to‑2024 campaign that targeted U.S. critical infrastructure such as NASA, the Federal Reserve, the Department of Energy, Health and Human Services, NIH and the U.S. Senate.

Why it matters

The operation dismantles a global botnet that processed over 2 million scanning and exploitation tasks in 2024, stole configuration files and user data from more than 300 U.S. organizations, and enabled state‑backed actors to hide the origin of attacks on vital government networks.

Short-term and longer-term

Short-term. Short‑term traders should watch for a spike in cybersecurity‑related earnings and potential volatility in tech stocks as the market reacts to the heightened focus on China‑linked cyber threats.

Longer-term. Longer‑term investors should note that the U.S.