Vendor

Lumen Technologies

0 mentions in 7 days · 2 in 30 days · 2 total · first seen Aug 26, 2026 · last 20d ago

Timeline2 articles

FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate

FBI seized domains disabling QScan and QTRouter malware run by China-linked QTFY group behind intrusions at NASA, DOJ, Senate and other agencies.

The Justice Department and FBI seized domains hard-coded into two malware tools, QScan and QTRouter, operated by a Chinese state-sponsored group called QTFY, tied to a Nanjing-based company that sold hacking services to China's Ministry of State Security and the PLA. QScan infected IoT devices worldwide while QTRouter combined them with commercial proxies and rented servers to build an obfuscation network that masked attack origins. Victims include NASA, the Federal Reserve, the Departments of Energy and Justice, HHS, NIH, and the U.S. Senate. The FBI and NSA published a joint advisory with indicators of compromise, the latest in operations against Mustang Panda, Flax Typhoon, and Volt Typhoon infrastructure.

Help Net SecurityAug 27, 00:00 UTC · 20d agoThreat actor in the wild

Officials disrupt Chinese espionage operation that hit multiple federal agencies

FBI and DOJ seized QTFY infrastructure, disrupting a Chinese state-sponsored group that compromised federal agencies and critical infrastructure since 2018.

Authorities seized three domains powering QScan and QTRouter, the hacking suite of QTFY, a Chinese government-funded group operating through front company Nanjing Xinjiuwei Network Technology. Targets include the Departments of Energy, Justice, and Health and Human Services, the Federal Reserve, NASA, NIH, financial institutions, defense contractors, utilities, telecoms, and hospitals; the group exploited zero-days in Ivanti, Pulse Secure, Fortinet, Citrix, and others, intruding three DOE national labs in September 2024. QScan carried over 200 proof-of-concept exploits and processed more than two million scanning tasks in a single day in 2024.

CyberScoopAug 26, 19:35 UTC · 20d agoThreat actor in the wild1

Appears with

organization FBI 2 threat actor QTFY 2 victim Federal Reserve 2 organization NSA 2 victim NASA 2 victim NIH 2 victim Department of Energy 2 organization Department of Justice 1 organization Nanjing Xinjiuwei Network Technology 1 organization U.S. Department of Justice 1 product QScan 1 product QTRouter 1 vendor BeyondTrust 1 vendor Black Lotus Labs 1 vendor Check Point 1 vendor Citrix 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.