FBI Seizes Hacking Tools Linked to Chinese Government

The FBI has seized scanning and phishing tools believed to have been used by a hacking group linked to the Chinese government. Officials stated the group is responsible for disruptive cyber operations in the United States and abroad, targeting sectors including the power industry, academia, and critical infrastructure.

The seizure, announced Thursday by the FBI and the Justice Department, targets a broad hacking campaign known in the private sector as Flax Typhoon. The tools, identified as "Microscan" and "FishHub," were used by the group to scan, phish, and infiltrate targets. "Microscan" was used against entities such as an unnamed U.S. power company, airports in Japan and Poland, and universities and companies in Taiwan. "FishHub" facilitated phishing activities that granted hackers remote access to victim networks, according to the FBI.

FBI officials state that the tools were operated by Integrity Technology Group, a China-based IT security company that has contracts with the Chinese government. The FBI views this company as the true identity behind Flax Typhoon. China's Ministry of Foreign Affairs has denied involvement and stated that China combats hacking activities legally, urging the U.S. to abandon double standards.

In September 2024, the FBI announced it had disrupted a large botnet associated with Flax Typhoon that compromised over 200,000 consumer devices. This botnet was used to facilitate cybercrimes, including the theft of sensitive information. The FBI intends to continue monitoring the situation to observe how the group may attempt to rebuild its infrastructure.