The FBI has disrupted infrastructure associated with a technical “quartermaster” that provided reconnaissance, proxy management, and operational routing capabilities for Chinese cyber espionage activities.
Black Lotus Labs, the threat research arm of Lumen Technologies, has been tracking the infrastructure for the past year and discovered the components of the framework used in attacks against U.S. critical infrastructure.
According to the researchers, the provider offers a reusable service consisting of four distinct operational elements:
QScan: a reconnaissance component that identifies and profiles high-value targets, collecting open ports, application banners, operating-system fingerprints, and configuration data
Fast Labyrinth: an encrypted relay network that conceals communications to and from victim organizations
