FBI Seizes China State-Sponsored Hacker Platforms Used to Target U.S. Critical Infrastructure

U.S. authorities seized domains for QScan and QTRouter, two malware platforms operated by a PRC-linked APT called QTFY that automatically compromised IoT devices to create a proxy-based infrastructure used against high-value U.S. targets (NASA, Federal Reserve, multiple federal agencies, and the U.S. Senate). The seizure, which disabled domain-dependent communication and authentication for the platforms, follows prior disruptions of PRC-linked botnets and an FBI/NSA advisory; organizations are advised to review IOCs, investigate unusual outbound IoT connections, rotate credentials, segment unmanaged devices, and patch exposed equipment.