Chinese hackers accused of targeting DOJ, NASA, U.S. Senate

SAN DIEGO, Calif. (KESQ) - Chinese hackers targeted and broke into the DOJ, NASA, and the U.S. Senate among other governmental agencies, according to court documents unsealed in San Diego federal court.   

The Department of Justice and FBI said they have seized internet domains used by a People's Republic of China state-sponsored group dubbed "QTFY'' to hack into sensitive U.S. infrastructure.

Among the victims of QTFY computer intrusion activity are the DOJ, NASA, the U.S. Senate, Federal Reserve, Department of Energy, Department of Health and Human Services, and National Institutes of Health, according to a DOJ statement.

An affidavit in support of the recent court-authorized seizures states that other targeted networks include those used by hospitals, telecommunications providers, power companies, financial institutions and defense contractors.

QTFY is employed by a private company called Nanjing Xinjiuwei Network Technology Company and offers hacking services to paying customers to include the PRC's Ministry of State Security and the People's Liberation Army, the DOJ said.

Court documents state that since at least 2018, QTFY computer infrastructure has been used to infiltrate critical infrastructure in the U.S. and other locations worldwide.

The DOJ says the recent seizures have blocked hackers' access to two hacking platforms known as "QScan," which scans and infects internet-connected devices, and "QTRouter" which conceals the PRC origin of their hacking activities.   

The investigation into the hacking activity was conducted by the FBI's San Diego Field Office and Cyber Division, the U.S. Attorney's Office for the Southern District of California, and the National Security Cyber Section of the Justice Department's National Security Division.