US Seizes Chinese Hacking Tools Targeting Global Infrastructure
The US Department of Justice and FBI seized seven internet domains to disrupt Chinese state-sponsored hacking tools targeting airports, universities, and power companies.
The United States Department of Justice and the FBI seized seven internet domains used by suspected Chinese state-sponsored hackers to target critical infrastructure and computer networks worldwide. The operation disrupted two specific tools, Microscan and FishHub, which authorities linked to the cyber group Flax Typhoon and a China-based contractor, Integrity Technology Group.
Microscan utilized a Mirai malware botnet to scan for vulnerabilities in targets including airports in Japan and Poland, a power company in South Carolina, and energy companies and universities in Taiwan. FishHub was employed for spear-phishing attacks, with approximately 20 Taiwanese universities confirmed as victims. FBI officials characterized these operations as indiscriminate and reckless.
This action follows a September 2024 disruption of a Mirai botnet associated with Integrity Technology Group that involved over 200,000 infected consumer devices. US authorities stated the current seizures render the tools inoperable and are intended to remove the capabilities of the threat actors by targeting their infrastructure and tools.
