FBI dismantles Chinese-linked botnet targeting US federal agencies

The botnet was managed by Nanjing Xinjiuwei Network Tech, a Chinese firm that provided sophisticated obfuscation services to hackers associated with the Ministry of State Security. By routing malicious activity through these infected devices, state-sponsored actors successfully infiltrated hospitals, defense contractors, and high-level government departments. The U.S. Senate remained a target as recently as 2026, according to court filings.

Because the seized domains were hardcoded into the botnet’s core architecture, the intervention effectively rendered the command and control servers inoperable. Network giant Lumen, which collaborated with the FBI on the investigation, tracked the group’s activity for over a year, observing detailed profiling of aerospace and defense targets. This disruption severs the primary communication channel the group relied upon to maintain its covert presence in American systems.