US Disrupts Chinese Cyber Espionage Operation Targeting Critical Infrastructure

On August 26, 2026 the US DOJ and FBI seized domains tied to Chinese platforms QScan and QTRouter used by the state-sponsored group QTFY (operated by Nanjing Xinjiuwei) to scan for vulnerabilities, exploit IoT and other systems, and route intrusions through a botnet; the infrastructure targeted US critical networks (including NASA and the Federal Reserve) and multiple sectors since at least 2018, and the seizure disrupted a significant cyber espionage campaign.