Chinese-linked hackers infiltrated several U.S. federal agencies, including the Justice Department, NASA, and the Senate, government officials said.
The breach highlights a persistent vulnerability in high-level government networks and the sophistication of state-sponsored cyber-espionage campaigns targeting national security data.
U.S. authorities disclosed the operation on Aug. 26, 2024 [4]. The campaign utilized specific proxy tools known as “QScan” and “QtRouter” [1] to gain access to sensitive networks. These tools had been active and targeting U.S. systems since 2018 [3].
While reports on the full scope vary, some sources identify the Federal Reserve as one of the compromised entities alongside the Justice Department, NASA, and the Senate [2]. The operation was designed as a cyber-espionage campaign to gather intelligence from government networks [3].
As part of the response to the breach, U.S. authorities seized two domains used by the hackers to facilitate their operations [2]. These domains were central to the infrastructure supporting the proxy tools used in the mass hacking of U.S. agencies and infrastructure [3].
There are conflicting reports regarding the current status of the breach. Some reports indicate that U.S. authorities have already disrupted the operation [2], while other accounts suggest the activity remained ongoing with limited public acknowledgement from the administration.
The infiltration represents a long-term effort by state-sponsored actors to maintain a presence within the most secure tiers of the U.S. government, a strategy often used to monitor communications and steal strategic intelligence over several years.
“Chinese-linked hackers infiltrated several U.S. federal agencies, including the Justice Department, NASA, and the Senate.”
The use of 'QScan' and 'QtRouter' suggests a shift toward specialized proxy infrastructure that allows attackers to mask their origins while maintaining long-term access. Because the breach spanned several years across multiple agencies, it indicates a systemic challenge in detecting 'low and slow' espionage tactics within federal networks.
