FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate
FBI seized domains disabling QScan and QTRouter malware run by China-linked QTFY group behind intrusions at NASA, DOJ, Senate and other agencies.
80
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenAug 15, 2026
- Last mentionedAug 27, 2026
Timeline
6 articles · newest firstUS takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate
DOJ takes down QScan and QTRouter Chinese obfuscation platforms used to breach Federal Reserve, DOE, DOJ, and Senate since 2018.
76
Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
Seqrite Labs details Operation QUICSILVER, a China-nexus espionage campaign targeting Myanmar government and IT with graduation-invite lures deploying QUICAgent backdoor.
65
Tracking Elirks Variants in Japan: Similarities to Previous Attacks
Unit 42 links new Elirks backdoor variants attacking Japanese organizations to 2012 Taiwan attacks, delivered via spear-phishing PDFs exploiting Adobe Flash CVE-2011-0611.
44
Mustang Panda Upgrades CoolClient With a Kernel Rootkit
Mustang Panda's updated CoolClient backdoor deploys a signed kernel driver to hide processes, files and network activity in Asian intrusions.
62
Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth
Kaspersky reports Mustang Panda's updated CoolClient backdoor now deploys a signed kernel-mode Windows rootkit, hitting government victims in Myanmar, Mongolia, Pakistan, and Russia.
62
Related CVEs
by mentions- CVE-2011-061199%—Remote Code Execution in Adobe Flash Player via Crafted Flash Content
Appears with
- Mustang Pandathreat actor · 4
- CoolClientproduct · 3
- Kasperskyvendor · 3
- Flax Typhoonthreat actor · 2
- Volt Typhoonthreat actor · 2
- NIHvictim · 2
- HoneyMytethreat actor · 2
- Microsoft Defenderproduct · 2
- QTFYthreat actor · 2
- ToneShellmalware · 2
- FBIorganization · 2
- Federal Reservevictim · 2
- CoolClientmalware · 2
- Department of Justicevictim · 2
- Sangforvendor · 2
- Department of Energyvictim · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.