Mastodon Digest
for the past
scorer
threshold
Posts

Des brumes sur Corenc hier matin

une

Use the link below for anything CYBERLEEK related. This link is defanged so remove the brackets [.]

https://ju3hayvlyj4mbemqheplf3px5d6j673oszj6atv6ukta7phiy22a[.]arweave[.]net/TTZwYqvCeMCRkDkesu336Pyff26WU-BOvqKmD7zoxrQ

🚨🇨🇳 FBI knocks China-linked QScan and QTRouter hacking infrastructure offline

The DOJ and FBI seized domains powering two hacking platforms operated by QTFY, a Chinese state-sponsored group tied to Nanjing Xinjiuwei Network Technology Company.

U.S. officials say QTFY has compromised or targeted sensitive networks including NASA, the Federal Reserve, Department of Energy, DOJ, HHS, NIH, and the U.S. Senate.

QScan automatically scans for and infects thousands of IoT devices worldwide.

Those compromised devices are then incorporated into QTRouter, an obfuscation network combining hacked IoT devices, commercial proxies, and leased VPS infrastructure to hide the China-based origin of intrusion activity.

Court documents say QTFY sells hacking services to paying customers including China's Ministry of State Security and People's Liberation Army.

Because the seized domains were hard-coded into QScan and QTRouter for authentication and communications, the FBI says the operation rendered both platforms inoperable.

The infrastructure has been linked to malicious activity dating back to at least 2018.

Seized: qtproxy[.]xyz

Source: justice.gov/opa/pr/justice-dep

Boosts

Je découvre (avec joie et émerveillement) que l'IGN propose un service de génération de cartes minecraft à partir d'une zone IGN : minecraft.ign.fr

If you're a user of the "opinionated" (LOL) Omarchy distro, you might be a simple few clicks from code execution from your browser

This is a touch more fun than the boring (but seemingly effective?) ClickFix-style attacks where you paste commands into a terminal.