FBI takes down proxy network used in Chinese state hacking campaigns
The FBI dismantled infrastructure belonging to a 'quartermaster' service that supplied reconnaissance, proxy relays, and routing tools to Chinese state-linked hackers. Lumen Technologies' Black Lotus Labs had spent a year tracking the system, identifying four components—QScan, Fast Labyrinth, QTRouter, and QTProxy—that worked together to profile targets and hide malicious traffic.
GoKawiil's interpretation of the reporting above, not reported fact.
This service acted as shared infrastructure supporting espionage against U.S. military, government, research, healthcare, and energy targets, meaning its takedown could disrupt multiple campaigns at once rather than a single actor. It also shows how private threat-intel firms and federal law enforcement are increasingly collaborating to expose and dismantle the tooling behind nation-state hacking rather than just individual intrusions.
- FBI dismantled a reusable proxy and reconnaissance network tied to Chinese cyber espionage.
- The infrastructure included four tools: QScan, Fast Labyrinth, QTRouter, and QTProxy.
- Victims spanned U.S. defense, government, academic, healthcare, and critical infrastructure sectors.
Firewalla Gold SE Smart Firewall — When stories about proxy networks and covert relay traffic hit the news, visibility into what your own devices are talking to suddenly feels essential. The Firewalla Gold SE is a plug-in-line smart firewall that monitors every connection on your home or small-office network, lets you block suspicious destinations, and segment IoT gear away from the rest of your devices. It's a practical way to get enterprise-style network insight without running a rack.
See Firewalla Gold SE Smart Firewall on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-26
Published there as: “FBI disrupts proxy network enabling Chinese espionage operations”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.