U.S. DOJ Seizes ‘QScan’ and ‘QTRouter’ Domains in China-Linked Federal Agency Hack Case

Domain-seizure takedowns echo the 2014 FBI ‘GameOver Zeus’ raid and the 2021 Microsoft disruption of Hafnium’s Exchange servers, but this episode sits in a lineage that began with 1999’s ‘Moonlight Maze’—state-backed digital espionage probing U.S. agencies. The shift from uniformed PLA Unit 61398 (exposed in 2013) to quasi-private contractors mirrors Cold-War-era use of front companies like Soviet Vneštorg to mask intelligence work, underscoring how great powers now outsource cyber offense. Long term, the event illustrates the entanglement of civilian critical infrastructure in geopolitical rivalry: domain seizures are temporary, but the underlying talent pool, attack surface, and incentive structure persist. If Sino-U.S. relations stay adversarial, these episodic clamp-downs may resemble early spy-plane shoot-downs—each a signal without fundamentally altering the trajectory toward a permanently contested digital commons that could define power projection well into the 22nd century.