whackNews · Threat Advisory
Research notes, threat write-ups, and product updates from the whack.sh team.
The FBI QTFY Advisory: When Attackers Rent the Same Proxies You Do
The FBI, NSA and CNMF have published a joint advisory on QTFY, a China-linked group the agencies attribute to a Nanjing contractor operating three branded internal platforms. One detail matters for anyone doing URL scanning: its obfuscation network rents the same commercial residential proxy pools legitimate scanners use. We also checked all 435 indicators against our own records and found nothing — and that null result is worth publishing.
Malicious Traffic Distribution Systems: Our Take on the FBI's New Advisory
The FBI's IC3 just warned about malicious Traffic Distribution Systems — links that quietly route real victims to fraud while showing automated checks a clean page. Here's our take on why this threat is so durable, why a single "clean" scan can't be trusted, and why seeing it requires looking the way real visitors do.