Aug. 26 (UPI) -- The Justice Department and FBI announced Wednesday that they seized two platforms used to target U.S. critical infrastructure and other sensitive networks.
The seizures were of two hacking platforms called QScan and QTRouter, which were used to hack U.S. infrastructure sites, the press release said. The affidavit described a Chinese state-sponsored group known as QTFY whose members are employed by China-based Nanjing Xinjiuwei Network Technology Company that has hacked into NASA, the Federal Reserve, the Department of Energy, Department of Justice, Department of Health and Human Services, National Institutes of Health, and the U.S. Senate.
"Federal law enforcement investigated and disabled [China's] malicious software, the latest in a series of technical operations to dismantle indiscriminate hacking activities sponsored by the People's Republic of China," Attorney General Todd Blanche said in a statement.
"These court-authorized seizures deny [China]-linked hackers access to tools they use to mount online attacks against our Nation's critical infrastructure," said Assistant Attorney General for National Security John A. Eisenberg in a statement.
According to court documents, QTFY offers computer hacking services to its paying customers, including China's army and Ministry of State Security. These computer hacking services include QScan and QTRouter, which work in conjunction, the press release said.
QScan scans and automatically infects thousands of internet-of-things devices worldwide, which are then added to the QTRouter network of QTFY-controlled devices. QTRouter consists of these compromised IoT devices, as well as commercial proxy service devices and leased virtual private servers. QTRouter then serves as an obfuscation network -- meaning it allows QTFY and other malicious cyber actors to conceal the China-origin of their computer intrusion activities because the malicious communications appear to originate from computers that are outside of China and may even be local to the targeted networks.
Because the seized domains were hard-coded into the QScan and QTRouter malware and used for essential tasks such as communication and authentication, the court-authorized seizures made QScan and QTRouter inoperable.