Loading malware…
1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
“Proxy Pool Management System” (代理池管理系统): This platform... is an aggregator of compromised IoT devices and hosted tools to compromise IoT devices. It hosts a database of exploits and a database of server fingerprints to quickly identify systems to target.
1 distinct technique documented for this family, organized by ATT&CK tactic.
“QTRouter runs on compromised routers flashed with custom OpenWrt firmware,” while botnet platforms “aggregate compromised IoT devices” for proxy nodes and DDoS launch points.
2 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.