MITRE ATT&CK for Enterprise

FBI names Nanjing contractor behind 300-victim Check Point Quantum Gateway campaign

The August 26 advisory, written with the NSA and Cyber National Mission Force, describes QTFY running its own scanning, proxying and botnet platforms since 2018. Commodity indicator feeds will not find it.