QTFY's freelance PRC hacker-network and cyber-contracting ecosystem
Threat Actor Meta
Summary
Hide ▲
Show ▼
QTFY's participation in freelance PRC hacker networks and malicious cyber contracting marketplaces reveals a broader support ecosystem behind its operations. The networked model helps the group obtain new exploits and attack techniques faster, increasing risk to US government and critical infrastructure targets. It also points to a more scalable and resilient adversary market presence rather than a standalone hacking crew.
Related Happenings
QTFY US government and critical infrastructure targeting campaign
Campaign
H score38
First: 27.08.2026 15:00
Last: 27.08.2026 15:00
Sources 1
How related:
A sophisticated Chinese hacking group known as QTFY is actively targeting US government and critical infrastructure systems via an ecosystem of custom-built malicious platforms, the FBI has warned.
About this happening:
The FBI warned that QTFY is actively targeting US government and critical infrastructure systems with a custom-built intrusion ecosystem, increasing the risk of stealthy c...
QTFY US government and critical infrastructure targeting campaign
CampaignHow related: A sophisticated Chinese hacking group known as QTFY is actively targeting US government and critical infrastructure systems via an ecosystem of custom-built malicious platforms, the FBI has warned.
About this happening: The FBI warned that QTFY is actively targeting US government and critical infrastructure systems with a custom-built intrusion ecosystem, increasing the risk of stealthy c...
FBI urgent mitigation advisory for QTFY
Advisory/Mitigation
H score39
First: 27.08.2026 15:00
Last: 27.08.2026 15:00
Sources 1
How related:
US government and critical infrastructure entities have been advised to take urgent action to mitigate the threat from QTFY.
About this happening:
The FBI urged US government and critical infrastructure entities to take urgent action against QTFY. The advisory, issued with the NSA and Cyber National Mis...
FBI urgent mitigation advisory for QTFY
Advisory/MitigationHow related: US government and critical infrastructure entities have been advised to take urgent action to mitigate the threat from QTFY.
About this happening: The FBI urged US government and critical infrastructure entities to take urgent action against QTFY. The advisory, issued with the NSA and Cyber National Mis...
The “quartermaster” alliance reshapes ransomware ecosystem operations
Threat Actor Meta
H score31
First: 26.08.2026 17:17
Last: 26.08.2026 17:17
Sources 1
About this happening:
The “quartermaster” has industrialized Operational Relay Box (ORB) networks for China-linked espionage operators, expanding stealthy routing and proxy management at sc...
The “quartermaster” alliance reshapes ransomware ecosystem operations
Threat Actor MetaAbout this happening: The “quartermaster” has industrialized Operational Relay Box (ORB) networks for China-linked espionage operators, expanding stealthy routing and proxy management at sc...
FunFoneFarm off-the-shelf phone-farm fraud ecosystem lowers scam barriers
Threat Actor Meta
H score29
First: 29.07.2026 12:30
Last: 29.07.2026 12:30
Sources 1
About this happening:
FunFoneFarm is lowering the barrier to entry for phone-farm fraud, letting operators buy or subscribe to an off-the-shelf stack for fake account creation, ATO,...
FunFoneFarm off-the-shelf phone-farm fraud ecosystem lowers scam barriers
Threat Actor MetaAbout this happening: FunFoneFarm is lowering the barrier to entry for phone-farm fraud, letting operators buy or subscribe to an off-the-shelf stack for fake account creation, ATO,...
NCSC-UK joint advisory on covert botnets and proxy networks
Public Sector Action
H score66
First: 23.04.2026 15:28
Last: 23.04.2026 15:28
Sources 1
About this happening:
NCSC-UK and partner agencies issued a joint advisory warning that China-nexus hackers are using hijacked consumer devices as covert proxy networks to hide maliciou...
NCSC-UK joint advisory on covert botnets and proxy networks
Public Sector ActionAbout this happening: NCSC-UK and partner agencies issued a joint advisory warning that China-nexus hackers are using hijacked consumer devices as covert proxy networks to hide maliciou...
Timeline
-
27.08.2026 03:00 2 articles · 20h ago
FBI links QTFY to freelance PRC hacker networks
Initial DisclosureThe FBI advisory published on August 26 says QTFY, also tracked as QT and QTCYBER, participates in freelance PRC hacker networks and malicious cyber contracting and subcontracting marketplaces, a support model that helps the group obtain new exploits and attack techniques and is tied to Nanjing Xinjiuwei Network Technology Co., an enabling company for PRC-linked cyber operations.
Show sources
- Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns — www.infosecurity-magazine.com — 27.08.2026 15:00
- Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns — www.infosecurity-magazine.com — 27.08.2026 15:00