FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure
ID: c85f1f7c-d5b3-51d1-9e02-dca43df9e504
STIX ID: report--c85f1f7c-d5b3-51d1-9e02-dca43df9e504
Feed Name: WIRED Security
Threat Score
U.S. authorities disrupted tools (QTRouter and QScan) allegedly operated by a Chinese contractor (Nanjing Xinjiuwei) that provided proxy botnets and relay infrastructure to a state-linked hacking group (QTFY); the proxies were used in widespread campaigns since 2018 targeting U.S. government agencies (including alleged breaches of the Federal Reserve, DOE, NIH, and DOJ), critical infrastructure, and private sector organizations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
