Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns

The FBI advisory warns that QTFY, a sophisticated PRC-linked APT, has used custom platforms (QScan for large-scale reconnaissance and QTRouter for traffic obfuscation using compromised IoT devices) and exploited a Check Point Quantum Gateway vulnerability to exfiltrate data from over 300 organizations including US government, defense contractors, financial institutions and universities; the advisory describes their TTPs, urges mitigations (patching, threat hunting, network isolation), and notes US authorities disrupted QTFY infrastructure on August 26.