CrushFTP

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions3
First seenAug 26, 2026
Last mentioned28d ago

Timeline

3 articles · newest first

Risky Bulletin: Authorities dismantle KillSec group, arrest members across Europe

European police dismantled the KillSec ransomware gang, arresting three suspects including a 16-year-old administrator.

Risky Business NewsOct 2, 03:09 UTC · 28d agoRansomwareExploitedCVE-2025-311615 · 2 reads

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

FBI and Lumen disrupted QTFY's QScan and QTRouter botnet platforms used by Chinese state-sponsored hackers to conceal intrusions into U.S. agencies.

The Hacker NewsSep 2, 06:26 UTC · Sep 2, 2026Threat actorExploitedCVE-2018-13379 CVE-2019-10068 CVE-2019-19781+106 · 1 read

FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure

FBI seizes China-linked QScan and QTRouter hacking platforms used by QTFY to obfuscate intrusions against US federal agencies.

Security AffairsAug 26, 17:33 UTC · Aug 26, 2026Threat actorExploited2 · 1 read

Related CVEs

by mentions

CVE-2025-31161100%9.8
Authentication Bypass in CrushFTP File Transfer Servers (CVE-2025-31161)
published Apr 3, 2025CrushFTPKEVRansomwarePoC ×5
CVE-2021-44228100%10.0
JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
published Dec 10, 2021Apache Log4j2KEVRansomwarePoC ×9
CVE-2026-173193%9.9
Pre-Authentication OS Command Injection RCE in BeyondTrust Remote Support and PRA
published Feb 6, 2026BeyondTrust Remote Support (RS)KEVRansomwarePoC
CVE-2020-5902100%9.8
Unauthenticated RCE via path traversal in F5 BIG-IP TMUI
published Jul 1, 2020F5 BIG-IPKEVRansomwarePoC ×8
CVE-2018-13379100%9.8
Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN
published Jun 4, 2019Fortinet FortiOSKEVRansomware
CVE-2019-1006895%9.8
Unauthenticated RCE in Kentico Xperience Staging Service
published Mar 26, 2019Kentico Xperience (Kentico CMS)KEVPoC
CVE-2021-26855100%9.1
Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)
published Mar 3, 2021Microsoft Exchange ServerKEVRansomwarePoC ×4
CVE-2024-24919100%8.6
Information Disclosure in Internet-Facing Check Point Quantum Security Gateways
published May 28, 2024Check Point Quantum Security GatewaysKEVRansomware
CVE-2024-819089%7.2
OS Command Injection RCE in Ivanti Cloud Services Appliance 4.6
published Sep 10, 2024Ivanti Cloud Services ApplianceKEV
CVE-2024-938058%7.2
OS Command Injection RCE in Ivanti Cloud Services Appliance Admin Console
published Oct 8, 2024Ivanti Endpoint Manager Cloud Services Appliance (CSA)KEV

Appears with

F5vendor · 2
Fortinetvendor · 2
Department of Energyvictim · 2
Check Pointvendor · 2
Ministry of State Securityorganization · 2
Federal Reservevictim · 2
Department of Justicevictim · 2
NIHvictim · 2
NASAvictim · 2
Atlassianvendor · 2
Microsoftvendor · 2
FBIorganization · 2
Citrixvendor · 2
QTFYthreat actor · 2
BeyondTrustvendor · 2
Apachevendor · 2

Entities are extracted by the model from each article. First seen Aug 26, 2026, last mentioned 28d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.