US disrupts Chinese QTFY hacking platform targeting critical systems.

The U.S. government disabled the QTFY group’s QScan and QTRouter services, seizing hard‑coded domains and rendering the botnet and scanning platform inoperable after years of attacks on defense, government, telecom and education networks. Investigators say QTFY built exploits, traded malware and maintained botnets used in both failed and successful intrusions affecting agencies such as NASA, the Federal Reserve and state governments. The group has exploited vulnerabilities across a wide range of enterprise products while operating within China’s broader ecosystem of offensive cyber contractors. Authorities also linked QTFY’s parent company to entities associated with Salt Typhoon, i‑Soon and other PRC intrusion networks.

Read more:

https://www.securityweek.com/us-disrupts-chinese-hacking-platform-used-in-military-and-critical-infrastructure-attacks/