The U.S. Department of Justice (DoJ) announced the disruption of two hacking platforms, QScan and QTRouter, operated by the Chinese state-sponsored group…
QScan is a tool used by QTFY to scan and automatically infect IoT devices worldwide, adding them to the QTRouter network for…
QTRouter is a network traffic obfuscation network that uses compromised IoT devices and commercial proxies to hide the origin of malicious activities.
QTBotnet is a platform used by QTFY to command and control compromised devices, capable of launching DDoS attacks and executing commands.
Cybersecurity researchers have uncovered a global cybercrime operation dubbed 'StopAndProtect' that abuses nearly 2,000 hacked WordPress websites to distribute malware, steal data,…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Ray, an open-source Python-native distributed computing framework, to…
RondoDox is a DDoS botnet threat actor group that incorporated CVE-2025-62593 into its arsenal two days before public disclosure, leveraging a proof-of-concept…
ShadowRay 2.0 is a campaign that exploits unpatched Ray instances to turn clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet.…
Evooo1Bot is a Linux botnet family derived from the Mirai source code, active since July 2026. It exploits known vulnerabilities to compromise…
GeoServer GeoTools is a Java library used by GeoServer. It was affected by CVE-2024-36401, a critical RCE vulnerability that was actively exploited…