FBI disrupts quartermaster infrastructure for Chinese espionage
Law Enforcement
Summary
Hide ▲
Show ▼
FBI disrupted infrastructure used by a technical quartermaster that enabled Chinese cyber espionage, removing reconnaissance, proxy management, and routing support tied to operations against U.S. critical infrastructure. The action targeted infrastructure that had supported follow-on access and activity against sectors including military, government, healthcare, financial, energy, and universities. The disruption limits a reusable relay and management service that helped conceal operator identity and route malicious traffic.
Related Happenings
QTFY US government and critical infrastructure targeting campaign
Campaign
H score40
First: 27.08.2026 15:00
Last: 27.08.2026 15:00
Sources 1
About this happening:
The QTFY campaign is a Chinese targeting activity against U.S. government and critical infrastructure systems, with reported focus on defense industrial base,...
QTFY US government and critical infrastructure targeting campaign
CampaignAbout this happening: The QTFY campaign is a Chinese targeting activity against U.S. government and critical infrastructure systems, with reported focus on defense industrial base,...
FBI urgent mitigation advisory for QTFY
Advisory/Mitigation
H score39
First: 27.08.2026 15:00
Last: 27.08.2026 15:00
Sources 1
About this happening:
The FBI urged US government and critical infrastructure entities to take urgent action against QTFY. The advisory, issued with the NSA and Cyber National Mis...
FBI urgent mitigation advisory for QTFY
Advisory/MitigationAbout this happening: The FBI urged US government and critical infrastructure entities to take urgent action against QTFY. The advisory, issued with the NSA and Cyber National Mis...
DoJ disrupts QTFY QScan and QTRouter infrastructure
Law Enforcement
H score26
First: 26.08.2026 19:42
Last: 26.08.2026 19:42
Sources 1
About this happening:
The U.S. Department of Justice disrupted QScan and QTRouter, cutting off a cybercrime infrastructure used by QTFY to target U.S. critical infrastructure an...
DoJ disrupts QTFY QScan and QTRouter infrastructure
Law EnforcementAbout this happening: The U.S. Department of Justice disrupted QScan and QTRouter, cutting off a cybercrime infrastructure used by QTFY to target U.S. critical infrastructure an...
QTFY long-running campaign against U.S. critical infrastructure
Campaign
H score35
First: 26.08.2026 19:42
Last: 26.08.2026 19:42
Sources 1
About this happening:
The QTFY campaign has been mapped as a long-running operation against U.S. critical infrastructure and sensitive networks, with activity dating to 2018 and attacks rep...
QTFY long-running campaign against U.S. critical infrastructure
CampaignAbout this happening: The QTFY campaign has been mapped as a long-running operation against U.S. critical infrastructure and sensitive networks, with activity dating to 2018 and attacks rep...
The “quartermaster” alliance reshapes ransomware ecosystem operations
Threat Actor Meta
H score31
First: 26.08.2026 17:17
Last: 26.08.2026 17:17
Sources 1
How related:
Lumen says the “quartermaster” industrialized the creation of Operational Relay Box (ORB) networks for China-linked espionage operators.
About this happening:
The “quartermaster” has industrialized Operational Relay Box (ORB) networks for China-linked espionage operators, expanding stealthy routing and proxy management at sc...
The “quartermaster” alliance reshapes ransomware ecosystem operations
Threat Actor MetaHow related: Lumen says the “quartermaster” industrialized the creation of Operational Relay Box (ORB) networks for China-linked espionage operators.
About this happening: The “quartermaster” has industrialized Operational Relay Box (ORB) networks for China-linked espionage operators, expanding stealthy routing and proxy management at sc...
Timeline
-
26.08.2026 17:17 2 articles · 13d ago
FBI disrupts quartermaster infrastructure used for Chinese cyber espionage
Initial DisclosureThe FBI disrupted infrastructure associated with a technical "quartermaster" that provided reconnaissance, proxy management, and operational routing for Chinese cyber espionage activities. Black Lotus Labs, the threat research arm of Lumen Technologies, tracked the infrastructure for the past year and identified QScan, Fast Labyrinth, QTRouter, and QTProxy as components of the framework used against U.S. military, defense, government, university, aerospace, bioinformatics, healthcare, financial, critical infrastructure, energy, and enterprise software targets.
Show sources
- FBI disrupts proxy network enabling Chinese espionage operations — www.bleepingcomputer.com — 26.08.2026 17:17
- FBI disrupts proxy network enabling Chinese espionage operations — www.bleepingcomputer.com — 26.08.2026 17:17