FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
Summary: The U.S. Department of Justice announced the disruption of two hacking platforms, QScan and QTRouter, operated by the Chinese state-sponsored group QTFY, which is employed by Nanjing Xinjiuwei Network Technology Company. QScan scans and infects IoT devices worldwide and adds them to the QTRouter obfuscation network, which the FBI says QTFY used to conceal the origin of intrusions against targets including NASA, the Federal Reserve, the Department of Energy, the Department of Justice, and the U.S. Senate.
What's compelling: QTFY has been active since May 2018, and Lumen says attacks as recent as June 2026 targeted a U.S. election system, with transit loops procured through legitimate paid commercial proxy subscriptions that make traditional static blocks insufficient.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026