The FBI has seized key domains used by a botnet backed by the Chinese government to target American institutions, including NASA and the Senate. The botnet, run by Nanjing Xinjiuwei Network Tech, controlled thousands of compromised internet-connected devices, serving as an obfuscation network for hackers.

Prosecutors reported that this state-sponsored group, known as QTFY, offered hacking services to Chinese government operatives. Affected organisations included the Federal Reserve, Department of Energy and Justice, and Health and Human Services. The hacks traced back to 2018 with a recent breach in 2026.

By seizing these domains, the botnet's command and control servers have been rendered inoperable, as they were hardcoded into its code. Network giant Lumen reported observing hackers targeting government agencies and defence sectors over the past year, sharing threat intelligence with law enforcement.