FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical infrastructure and other sensitive networks in the country. The activity has been attributed to a Chinese state-sponsored group known as QTFY, employed by Nanjing Xinjiuwei Network Technology Company (南京鑫玖维网络科技有限公司).&

Report facts: The U.S. Department of Justice announced disruption of two hacking platforms, QScan and QTRouter, allegedly operated by Chinese state-sponsored group QTFY via Nanjing Xinjiuwei Network Technology Company, and used to target U.S. critical infrastructure and sensitive networks. RealGround analysis: Although the article does not explicitly mention AI systems, such state-linked infrastructure attacks highlight the risk that AI-related services, models, or pipelines within critical organizations could be compromised through their broader software and network supply chain. Organizations should map dependencies, maintain an AI-specific SBOM, and regularly assess how third-party platforms and state-sponsored activity could impact the integrity and availability of AI agents and models embedded in critical operations.