Department of Health and Human Services

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 27, 2026
Last mentionedSep 2, 2026

Timeline

2 articles · newest first

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

FBI and Lumen disrupted QTFY's QScan and QTRouter botnet platforms used by Chinese state-sponsored hackers to conceal intrusions into U.S. agencies.

The Hacker NewsSep 2, 06:26 UTC · Sep 2, 2026Threat actorExploitedCVE-2018-13379 CVE-2019-10068 CVE-2019-19781+106 · 1 read

FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate

FBI seized domains disabling QScan and QTRouter malware run by China-linked QTFY group behind intrusions at NASA, DOJ, Senate and other agencies.

Help Net SecurityAug 27, 00:00 UTC · Aug 27, 2026Threat actorExploited4 · 1 read

Related CVEs

by mentions

CVE-2021-44228100%10.0
JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
published Dec 10, 2021Apache Log4j2KEVRansomwarePoC ×9
CVE-2019-1006895%9.8
Unauthenticated RCE in Kentico Xperience Staging Service
published Mar 26, 2019Kentico Xperience (Kentico CMS)KEVPoC
CVE-2025-31161100%9.8
Authentication Bypass in CrushFTP File Transfer Servers (CVE-2025-31161)
published Apr 3, 2025CrushFTPKEVRansomwarePoC ×5
CVE-2018-13379100%9.8
Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN
published Jun 4, 2019Fortinet FortiOSKEVRansomware
CVE-2020-5902100%9.8
Unauthenticated RCE via path traversal in F5 BIG-IP TMUI
published Jul 1, 2020F5 BIG-IPKEVRansomwarePoC ×8
CVE-2024-896399%9.1
Unauthenticated Path Traversal in Ivanti Cloud Services Appliance
published Sep 19, 2024Ivanti Cloud Services Appliance (CSA)KEV
CVE-2021-26855100%9.1
Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)
published Mar 3, 2021Microsoft Exchange ServerKEVRansomwarePoC ×4
CVE-2024-24919100%8.6
Information Disclosure in Internet-Facing Check Point Quantum Security Gateways
published May 28, 2024Check Point Quantum Security GatewaysKEVRansomware
CVE-2024-938058%7.2
OS Command Injection RCE in Ivanti Cloud Services Appliance Admin Console
published Oct 8, 2024Ivanti Endpoint Manager Cloud Services Appliance (CSA)KEV
CVE-2024-819089%7.2
OS Command Injection RCE in Ivanti Cloud Services Appliance 4.6
published Sep 10, 2024Ivanti Cloud Services ApplianceKEV

Appears with

NIHvictim · 2
Department of Justiceorganization · 2
NASAvictim · 2
QTFYthreat actor · 2
Department of Justicevictim · 2
FBIorganization · 2
Department of Energyvictim · 2
U.S. Senatevictim · 2
Federal Reservevictim · 2
CrushFTPvendor · 1
Flax Typhoonthreat actor · 1
NSAorganization · 1
BeyondTrustvendor · 1
QTRouterproduct · 1
Mustang Pandathreat actor · 1
QScanproduct · 1

Entities are extracted by the model from each article. First seen Aug 27, 2026, last mentioned Sep 2, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.