seizes

Aug. 26 (UPI) — The Justice Department and FBI announced Wednesday that they seized two platforms used to target U.S. critical infrastructure and other sensitive networks.

The seizures were of two hacking platforms called QScan and QTRouter, which were used to hack U.S. infrastructure sites, the press release said. The affidavit described a Chinese state-sponsored group known as QTFY whose members are employed by China-based Nanjing Xinjiuwei Network Technology Company that has hacked into NASA, the Federal Reserve, the Department of Energy, Department of Justice, Department of Health and Human Services, National Institutes of Health, and the U.S. Senate.

“Federal law enforcement investigated and disabled [China’s] malicious software, the latest in a series of technical operations to dismantle indiscriminate hacking activities sponsored by the People’s Republic of China,” Attorney General Todd Blanche said in a statement.

“These court-authorized seizures deny [China]-linked hackers access to tools they use to mount online attacks against our Nation’s critical infrastructure,” said Assistant Attorney General for National Security John A. Eisenberg in a statement.

According to court documents, QTFY offers computer hacking services to its paying customers, including China’s army and Ministry of State Security. These computer hacking services include QScan and QTRouter, which work in conjunction, the press release said.

QScan scans and automatically infects thousands of internet-of-things devices worldwide, which are then added to the QTRouter network of QTFY-controlled devices. QTRouter consists of these compromised IoT devices, as well as commercial proxy service devices and leased virtual private servers. QTRouter then serves as an obfuscation network — meaning it allows QTFY and other malicious cyber actors to conceal the China-origin of their computer intrusion activities because the malicious communications appear to originate from computers that are outside of China and may even be local to the targeted networks.

Because the seized domains were hard-coded into the QScan and QTRouter malware and used for essential tasks such as communication and authentication, the court-authorized seizures made QScan and QTRouter inoperable.

Syrian authorities say they intercepted a shipment including missiles, rockets, and drones before it entered from Iraq.

Syria has seized a shipment of weapons, including missiles, at its border with Iraq, as authorities say they foiled an ⁠attempt to ⁠smuggle arms to Hezbollah in Lebanon, something the group denies.

Syria’s General Authority of Ports and Customs said on Thursday that the weapons shipment – which included long-range missiles, rockets and drones – was concealed inside “one of the oil tanker-trucks ⁠headed to the city of Baniyas”.

It was discovered during routine inspection procedures at the al-Tanf border crossing between Syria and Iraq after customs officers subjected the vehicle to a thorough search, Syria’s state news agency reported.

“According to the ministry, preliminary investigations based on evidence collected at the scene indicated that the shipment was intended to transit Syrian territory before being delivered to the Hezbollah terrorist militia in Lebanon,” SANA wrote, citing sources from Syria’s Interior Ministry.

The Iran-backed Lebanese group denied having any activity in Syria, dismissing the accusations in a statement on Thursday as “fabricated narratives with no basis in fact, aimed at harming Hezbollah”.

Syrian authorities are known to be hostile towards the group, as it was an ally of former president Bashar al-Assad before he was ousted in 2024 by members of the current government.

Following the seizure, Iraq said it would form ‌a high-level committee to investigate what happened. The military’s Joint Operations Command said Baghdad would coordinate with Syrian authorities to establish the circumstances of the attempted smuggling, hold those responsible to account, and strengthen security along the shared border.

The Baniyas route, where the tanker was passing through, has been used frequently in recent months for fuel movements between ⁠Iraq and Syria, since the main route through the Strait of Hormuz has been disrupted by the Iran war.

“This seizure from Syria is part of a broader reshaping of the region that has occurred over the last couple of years, particularly the fall of the Assad regime in Syria,” said Al Jazeera’s Heidi Pett, reporting from Lebanon.

“It used to be a very popular land route for Iran to traffic weapons and cash to its partner here in Lebanon, Hezbollah. They went from Iran, across Iraq, through Syria, and then here into Lebanon.”

“Under the Assad regime they [Iran] had very little trouble with that, but since the new [Syrian] President Ahmed al-Sharaa took power, he has been cracking down on that crossroad of smuggling,” Pett added.

A source at Syria’s Interior Ministry told SANA that “protecting Syria’s borders and safeguarding its national sovereignty remained a top priority, adding that it would not allow Syrian territory to be used as a transit route or launch point for arms smuggling or other activities that threaten the security of Syria or neighbouring countries”.

US President Donald ⁠Trump had spoken to Syria’s al-Sharaa about disarming Hezbollah, which is fighting Israeli forces occupying southern Lebanon. But Lebanese President Joseph Aoun’s office said al-Sharaa had assured him that Syria would not ‌take sides in Lebanon’s internal affairs, including fighting Hezbollah.

Just over the Litani river line, the IDF has confirmed it has captured one of the key strategic prizes in the area – Beaufort Castle. It was built as a fortress commanding views from high on the cliffs above the Litani river by the Crusaders some 900 years ago, and has been fought over many times since.