International Coalition Seizes Hacking Tools Linked to China's Integrity Technology Group

Coalition Disrupts Chinese Hacking Operations

Cybersecurity agencies from multiple countries collaborated to seize infrastructure supporting two hacking tools, Microscan and FishHub. This action targeted operations linked to China's Integrity Technology Group, a company identified as a contractor for the People's Republic of China's (PRC) Ministry of State Security.

Tools Used for Critical Infrastructure Attacks

According to U.S. officials, Microscan and FishHub were used to conduct widespread vulnerability scanning and, in some cases, intrusions against critical infrastructure organizations. Targets included entities in the United States, Taiwan, Japan, and Poland, as well as universities, government agencies, telecommunications providers, and media organizations globally.

FBI Assistant Director Brett Leatherman stated that Integrity Technology Group provided capabilities to China-linked threat actors for these activities. The U.S. Department of Justice seized multiple websites underpinning these tools, and U.S. officials published a 58-page advisory detailing these and other tools used in a campaign known as Flax Typhoon over the past six years.

Role of Contractors in Cyber Operations

The FBI noted that the Chinese government utilizes contractors and enabling companies to expand the reach and scale of its malicious cyber activities. Disrupting these organizations makes it more difficult for China-linked hackers to target networks in the U.S. and other countries.