Many cyberattacks originate from unexpected places. A forgotten router or an old security camera connected to the internet can become a tool for hackers. This was evident in a hacking operation linked to China, targeting key U.S. networks.

U.S. Networks Targeted

On August 26, the Justice Department and FBI revealed that since 2018, networks of NASA, the Federal Reserve, and the Justice Department had faced intrusion attempts. Other targets included the Department of Energy and Health and Human Services.

Four unidentified U.S. and South Korean companies were also attacked. Tools named QScan and QTRouter played key roles in these operations.

Operation Details and Shutdown

QScan and QTRouter were developed by the Chinese group QTFY, which is linked to the Nanjing Xinjiuwei Network Technology Company. Allegedly, this company provided hacking services to clients including China’s Ministry of State Security.

The hacking tactics involved using compromised networks to disguise attack origins. Federal agents shut down QScan and QTRouter by seizing domains critical to their function. This dismantled part of the attack infrastructure.

Past Cyber Operations

This action is part of ongoing operations against Chinese hacking efforts. In 2025, the FBI removed PlugX malware from U.S. systems, and in 2024, they disabled a vast botnet.

Your Role in Cybersecurity

Although you might not be a target like NASA, how you manage your personal devices matters. Compromised home devices can become part of attacks against others. Follow these steps to protect your devices:

1. Update router firmware: Ensure your router’s firmware is current. Check for updates regularly.
2. Replace unsupported routers: If your router no longer receives updates, consider replacing it.
3. Change administrator passwords: Use strong, unique passwords for your router’s admin account.
4. Use strong Wi-Fi passwords: Ensure your Wi-Fi password is unique and secure.
5. Enable WPA3 encryption: Use WPA3 or WPA2 encryption for better security.
6. Turn off remote administration: Disable this feature unless necessary.
7. Disable WPS and UPnP: These features can expose your network to threats.
8. Enable your router’s firewall: Make sure it’s active to block unauthorized access.
9. Separate networks for IoT devices: Use a separate network for smart devices.
10. Update smart-home devices: Keep them updated, and replace those without support.
11. Change default passwords: Secure your IoT devices with unique passwords.
12. Check connected devices: Regularly review devices connected to your network.
13. Remove unused devices: Disconnect devices you no longer use.
14. Keep computers and phones secure: Install updates and use antivirus software.
15. Watch for compromises: Be alert to unusual router behavior.

Takeaway

The efforts of hackers to disguise their activity show the importance of securing your network. While federal agents work to counter these threats, you can play a role by maintaining your devices. Protecting your network is a practical step in safeguarding against cyber threats.