In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review
SecurityWeek weekly roundup covers exploited WordPress Super Forms flaw CVE-2026-14894, a $10M bounty on an Iranian cyber official, InjectEave attacks, and more.
45
- Mentions · 7d0
- Mentions · 30d0
- All mentions9
- First seenAug 26, 2026
- Last mentionedSep 11, 2026
Timeline
9 articles · newest firstFBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
FBI and Lumen disrupted QTFY's QScan and QTRouter botnet platforms used by Chinese state-sponsored hackers to conceal intrusions into U.S. agencies.
78
⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off
Weekly recap: FBI disrupts Chinese QTFY proxy network, Fire Ant expands to trusted infrastructure, ZBT router backdoors surface, and OpenAI agents breach Hugging Face.
35
DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims
DoJ corrected its statement to say US federal agencies were targets, not confirmed victims, of China-linked group QTFY's intrusions.
70
Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns
FBI warns that China-linked hacking group QTFY uses custom-built distributed platforms to exploit vulnerabilities at scale while targeting US infrastructure.
72
FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate
FBI seized domains disabling QScan and QTRouter malware run by China-linked QTFY group behind intrusions at NASA, DOJ, Senate and other agencies.
80
Officials disrupt Chinese espionage operation that hit multiple federal agencies
FBI and DOJ seized QTFY infrastructure, disrupting a Chinese state-sponsored group that compromised federal agencies and critical infrastructure since 2018.
88
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure
FBI seizes China-linked QScan and QTRouter hacking platforms used by QTFY to obfuscate intrusions against US federal agencies.
78
US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate
DOJ takes down QScan and QTRouter Chinese obfuscation platforms used to breach Federal Reserve, DOE, DOJ, and Senate since 2018.
76
Related CVEs
by mentions- CVE-2021-44228100%10.0JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
- CVE-2025-31161100%9.8Authentication Bypass in CrushFTP File Transfer Servers (CVE-2025-31161)
- CVE-2024-896399%9.1Unauthenticated Path Traversal in Ivanti Cloud Services Appliance
- CVE-2026-8157884%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2024-938058%7.2OS Command Injection RCE in Ivanti Cloud Services Appliance Admin Console
- CVE-2024-819089%7.2OS Command Injection RCE in Ivanti Cloud Services Appliance 4.6
- CVE-2026-74232<1%9.3Backdoor implant in Zbtlink and MoreQuick routers allows unauthenticated root access
- CVE-2026-742333%9.3Unauthenticated Root Command Injection in Zbtlink (ZBT) Router infosrvd Service
- CVE-2026-66747<1%9.3Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line
Appears with
- FBIorganization · 9
- NASAvictim · 6
- NIHvictim · 5
- Federal Reservevictim · 5
- Department of Energyvictim · 5
- Microsoftvendor · 5
- Department of Justicevictim · 4
- QScanproduct · 4
- Ministry of State Securityorganization · 4
- QTRouterproduct · 4
- Pulse Securevendor · 3
- Fortinetvendor · 3
- Check Pointvendor · 3
- F5vendor · 3
- BeyondTrustvendor · 3
- Citrixvendor · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.