The Federal Bureau of Investigation, National Security Agency, and Cyber National
Mission Force are releasing this joint cybersecurity advisory to alert organizations
concerning China-linked cyber threat actors, who use the acronyms QTFY, QT, and
QTCYBER for themselves and their tools and have developed malicious distributed
platforms to compromise the networks of US and foreign organizations.
The cyber actors’ products have enabled hackers to obfuscate their location and
target systems in critical infrastructure sectors including defense industrial base
(DIB), communications, government, and higher education. This advisory provides
details on the actors’ activities; tactics, techniques, and procedures (TTPs);
infrastructure details; and indicators of compromise (IOCs). The information is
derived from incident response and investigative techniques.