Threat Intelligence Brief
Curated summary with source attribution
Source: cbc.ca
Threat Risk: High
Victim: US Government Agencies and Critical Infrastructure
Incident: A long-term Chinese state-sponsored espionage campaign targeting various US federal departments and private companies.
Impact: Unauthorized access to sensitive government networks and critical infrastructure.
Attacker: Nanjing Xinjiuwei Network Technology Company
Analysis: The campaign leveraged specialized platforms known as QScan and QTRouter to breach high-value targets since at least 2018. The operation was managed by Nanjing Xinjiuwei Network Technology Company, acting on behalf of China’s Ministry of State Security and the PLA. This highlights a systemic trend of the Chinese government utilizing private contractors to conduct offensive cyber operations.
Recommendations: Patch and harden VPN gateways to prevent unauthorized access; Implement strict network segmentation for critical infrastructure; Monitor for indicators of compromise associated with QScan and QTRouter platforms
Source: CBC News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-08-27 15:53 UTC
A state-sponsored hacking campaign targeting sensitive US government agencies and private firms. Potential compromise of highly sensitive national security, financial, and health data. The campaign leveraged specialized platforms known as QScan and QTRouter to infiltrate high-value targets including the Justice Department and the Senate. These tools were operated by a private Chinese firm acting as a contractor for the Ministry of State Security and the People’s Liberation Army. The operation represents a long-term effort to compromise critical infrastructure and sensitive government networks since 2018.
Corroborating source: english.aawsat.com