How China-linked hackers targeted NASA, Senate and US critical networks

US authorities have dismantled a suspected Chinese state-sponsored cyber-espionage operation that infiltrated sensitive networks, including those of NASA, the US Senate, the Federal Reserve, and key government departments. The operation, which spanned from 2018 to 2026, also targeted hospitals, telecom providers, power companies, financial institutions, and defense contractors.

The FBI and the National Security Agency (NSA) spent months investigating this high-tech Chinese spy network. The hackers, allegedly operating through a China-based company, Nanjing Xinjiuwei Network Technology Company, used this firm's offensive cyber capabilities, which included customers like China's Ministry of State Security and the People's Liberation Army.

This company advertised for cybersecurity engineers capable of handling large-scale penetration projects on Chinese recruitment websites. The hackers infiltrated target infrastructure by blending with routine consumer network traffic, remaining undetected. On Wednesday, US departments attempted to mitigate further damage by blocking three internet domains linked to the Chinese firm.

Lumen Technologies, a US tech company, noted that while the Chinese firm helped conceal the hackers' activities, it also provided investigators with a paper trail. The agencies are considering releasing an advisory on the techniques used by the hackers to help victim companies bolster their defenses.