Federal authorities disrupt China-backed hacking operation targeting US critical infrastructure

The FBI and Department of Justice have shut down a hacking network tied to a Chinese state-backed group known as QTFY, which spent years spying on U.S. government agencies and critical infrastructure companies. The group used two tools, called QScan and QTRouter, to hijack thousands of internet-connected devices worldwide and route stolen data through hidden networks. Targets included the Department of Energy, power companies, telecom firms, hospitals, and defense contractors, along with agencies like the Federal Reserve and NASA. Officials say the operation was run by a Chinese company that worked for the People's Liberation Army and China's Ministry of State Security.

The hackers broke into networks by exploiting flaws in widely used business equipment, not home devices, then stole login credentials to stay inside undetected. Investigators say the campaign focused on spying and data theft rather than sabotage, and it went on for years before its Chinese origin could be confirmed.

For homeowners, this isn't a case where you need to change anything at your house. The vulnerabilities involved were in commercial network gear and cloud systems used by companies and agencies, not in home routers, smart thermostats, or other consumer devices. It's still smart practice to keep any internet-connected home equipment updated with the latest software, but this particular takedown is about protecting the power grid and government systems, not something that requires action from individual households.