Breaches and incidentsBriefReported by a reputable outlet, citing the company
QTFY: FBI disrupts China-linked “digital quartermaster” botnet and obfuscation network
DOJ and FBI carried out a court-authorized disruption of QScan and QTRouter by seizing hard-coded domains.
- Disclosed
What happened
- DOJ and FBI carried out a court-authorized disruption of QScan and QTRouter by seizing hard-coded domains. FBI, NSA and Cyber National Mission Force published a joint advisory. US authorities tie QTFY to Nanjing Xinjiuwei Network Technology, which court documents say sold hacking services to the MSS and PLA.
- Technique: QScan infects IoT devices; QTRouter (compromised IoT, OpenWrt routers, commercial proxies, VPS) hides origins; QTBotnet also does DDoS. Exploits include Ivanti CSA CVE-2024-8190 / -8963 / -9380 and N-days in Fortinet, Citrix, Exchange, F5, Log4j, Confluence, Check Point, CrushFTP, BeyondTrust.
- Attribution: FBI/DOJ; Lumen describes activity since May 2018. Named targets (NASA, Fed, DOE, DOJ, Senate) were scanned; NSA reportedly says access was not gained.
Live scores
Live scores
CVE-2024-8190- EPSS
- 0.885
very likely to be attacked soon - VEDAS
- 0.986
strong exploit evidence - On CISA KEV
- Yes, since 2024-09-13
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2024-8963- EPSS
- 0.986
very likely to be attacked soon - VEDAS
- 0.978
strong exploit evidence - On CISA KEV
- Yes, since 2024-09-19
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2024-9380- EPSS
- 0.583
very likely to be attacked soon - VEDAS
- 0.981
strong exploit evidence - On CISA KEV
- Yes, since 2024-10-09
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
- https://thehackernews.com/2026/08/fbi-disrupts-china-linked-qtfy.html
- https://techcrunch.com/2026/08/26/us-seizes-domains-of-chinese-botnet-used-to-hack-nasa-justice-department-and-the-senate/
- https://www.helpnetsecurity.com/2026/08/27/fbi-disrupts-china-linked-hacking-network/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.