A sophisticated Chinese hacking group, QTFY, has been targeting US government and critical infrastructure systems using custom-built platforms, according to an FBI warning. Established in 2018, the group has focused on sectors such as defense, communications, and education, successfully exfiltrating data from over 300 organizations in 2024. QTFY utilizes platforms like 'QScan' for vulnerability scanning and 'QTRouter' for network obfuscation, allowing them to maintain stealth during operations.
The FBI advises US entities to mitigate risks by updating software, auditing for vulnerabilities, and threat hunting. In response, US authorities have disrupted QTFY's infrastructure, seizing their malicious tools.