Washington [US] October 12 (ANI): The US Department of Justice (DOJ) and Federal Bureau of Investigation (FBI) have seized seven web domains allegedly utilized by Chinese state-linked hackers to focus on important infrastructure and pc networks within the United States and abroad, in line with a report by The Epoch Times (TET).
The seizures, introduced on October 8, focused two hacking instruments allegedly operated by cyber actors working for Integrity Technology Group, a Beijing-based cybersecurity firm with contracts with Chinese authorities, the TET report stated. The instruments had been reportedly used to determine safety vulnerabilities, achieve unauthorised entry to pc networks and steal data.
A joint cybersecurity advisory issued by US and allied companies stated hackers enabled by Integrity Tech mixed automated scanning, networks of compromised units and focused intrusions to steal delicate data from organisations worldwide, together with US important infrastructure operators.
According to the report, a federal Justice of the Peace choose in Pennsylvania accredited the seizure warrant on October 6, authorising the domains to be redirected to FBI-controlled servers. The Justice Department has not introduced legal expenses towards Integrity Tech or recognized particular person defendants in reference to the seizures.
The operation marks the second public US disruption of Integrity Tech-linked hacking infrastructure in two years. In September 2024, the FBI dismantled a community of greater than 200,000 contaminated internet-connected units, together with house routers and cameras, which investigators stated had been used for cyber operations. A newly unsealed FBI affidavit, nonetheless, indicated that instruments linked to Integrity Tech remained accessible afterward.
One software, often known as Microscan, was allegedly used to scan pc networks for vulnerabilities that hackers may later exploit. Investigators recognized scanning exercise involving a South Carolina energy firm, airports in Japan and Poland, a multinational nonprofit organisation and Taiwanese firms working within the pure gasoline and electrical energy sectors.
The courtroom filings didn’t set up that these organisations had been efficiently breached, though investigators stated two Taiwanese universities had been hacked after their networks had been scanned.
A second software, FishHub, was reportedly utilized in focused phishing campaigns to trick victims into opening malicious content material. It may then ship software program permitting attackers to remotely management computer systems, search recordsdata and switch stolen data. The Justice Department stated round 20 Taiwanese universities had been confirmed victims of FishHub exercise.
FBI Cyber Division Assistant Director Brett Leatherman stated the Chinese regime depends on contractor and enabling firms to develop the attain of its cyber exercise, including that exposing and disrupting such entities makes it tougher to focus on American networks and infrastructure.
Integrity Tech was sanctioned by the US Treasury Department in January 2025 over its alleged position in cyber operations attributed to Chinese state-sponsored hackers. The firm rejected the allegations on the time, saying they lacked a factual foundation and sustaining that it operated legally.
China’s Foreign Ministry spokesperson Mao Ning, responding on October 9, rejected what she described as politically motivated misinformation and accused Washington of double requirements, in line with TET.
The UK additionally sanctioned Integrity Tech in December 2025 over its alleged involvement in cyber operations focusing on British public-sector programs.
The joint advisory recognized targets throughout authorities providers, important manufacturing, healthcare and data expertise. It additionally warned that hackers used mass scanning and focused assaults to steal credentials, keep unauthorised entry and extract delicate recordsdata and emails.
The companies urged authorities our bodies and significant infrastructure operators to go looking their networks for proof of compromise, repair identified vulnerabilities, disable pointless providers and strengthen account protections, the TET report stated. (ANI)