← Back to feed
Threat Actors & CampaignsEmerging1 sourceAug 26, 2026 · 17:33via Security Affairs

FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure

Brief

FBI seizes QScan and QTRouter, China-linked platforms used to hide intrusions and target U. S. critical infrastructure.

The U. S. Department of Justice and the FBI have seized two platforms, QScan and QTRouter, used by a China-linked group to hide cyberattacks and target critical infrastructure. The operation matters because it shows how state-backed actors no longer need to build every part of an attack from scratch: they can rely on shared scanning tools, compromised devices, commercial proxy services, and rented servers.

U. S. authorities attribute the activity to a group known as QTFY, which they say operated through the China-based company Nanjing Xinjiuwei Network Technology Company. According to the Justice Department, the group offered hacking services to paying clients that included China’s Ministry of State Security and the People’s Liberation Army.

Read more on Security Affairs