QTBotnet

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 2, 2026
Last mentionedSep 2, 2026

Timeline

1 articles · newest first

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

FBI and Lumen disrupted QTFY's QScan and QTRouter botnet platforms used by Chinese state-sponsored hackers to conceal intrusions into U.S. agencies.

The Hacker NewsSep 2, 06:26 UTC · Sep 2, 2026Threat actorExploitedCVE-2018-13379 CVE-2019-10068 CVE-2019-19781+106 · 1 read

Related CVEs

by mentions

CVE-2021-44228100%10.0
JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
published Dec 10, 2021Apache Log4j2KEVRansomwarePoC ×9
CVE-2019-1006895%9.8
Unauthenticated RCE in Kentico Xperience Staging Service
published Mar 26, 2019Kentico Xperience (Kentico CMS)KEVPoC
CVE-2025-31161100%9.8
Authentication Bypass in CrushFTP File Transfer Servers (CVE-2025-31161)
published Apr 3, 2025CrushFTPKEVRansomwarePoC ×5
CVE-2018-13379100%9.8
Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN
published Jun 4, 2019Fortinet FortiOSKEVRansomware
CVE-2020-5902100%9.8
Unauthenticated RCE via path traversal in F5 BIG-IP TMUI
published Jul 1, 2020F5 BIG-IPKEVRansomwarePoC ×8
CVE-2024-896399%9.1
Unauthenticated Path Traversal in Ivanti Cloud Services Appliance
published Sep 19, 2024Ivanti Cloud Services Appliance (CSA)KEV
CVE-2021-26855100%9.1
Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)
published Mar 3, 2021Microsoft Exchange ServerKEVRansomwarePoC ×4
CVE-2024-24919100%8.6
Information Disclosure in Internet-Facing Check Point Quantum Security Gateways
published May 28, 2024Check Point Quantum Security GatewaysKEVRansomware
CVE-2024-938058%7.2
OS Command Injection RCE in Ivanti Cloud Services Appliance Admin Console
published Oct 8, 2024Ivanti Endpoint Manager Cloud Services Appliance (CSA)KEV
CVE-2024-819089%7.2
OS Command Injection RCE in Ivanti Cloud Services Appliance 4.6
published Sep 10, 2024Ivanti Cloud Services ApplianceKEV

Appears with

BeyondTrustvendor · 1
Citrixvendor · 1
QScanproduct · 1
FBIorganization · 1
QTFYthreat actor · 1
CrushFTPvendor · 1
U.S. Senatevictim · 1
QTRouterproduct · 1
Department of Justicevictim · 1
NIHvictim · 1
Department of Energyvictim · 1
Kenticovendor · 1
NASAvictim · 1
Atlassianvendor · 1
OpenWrtproduct · 1
Check Pointvendor · 1

Entities are extracted by the model from each article. First seen Sep 2, 2026, last mentioned Sep 2, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.