Integrity Technology Group Linked to Chinese Cyber Operations Against Critical Infrastructure

• •Integrity Technology Group is linked to Chinese government cyber operations.
• •Targeted sectors include critical infrastructure, healthcare, and education.
• •Organizations are urged to review the advisory and strengthen defenses.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), FBI, and NSA have identified Integrity Technology Group, a China-based company, as a facilitator of cyberattacks targeting critical infrastructure worldwide. The advisory highlights that Chinese government-linked actors are using automated scanning, botnets, and hands-on hacking techniques to infiltrate networks and steal sensitive data. Integrity Tech is reported to support campaigns associated with threat actors Flax Typhoon, Ethereal Panda, and Red Juliett, which have targeted sectors including energy, healthcare, and education. The advisory urges organizations to review indicators of compromise and strengthen defenses against these tactics. Recent operations have revealed that Integrity Tech has been involved in spear phishing attacks and vulnerability scanning against various targets, including U.S. energy facilities and academic institutions. This marks a significant escalation in the ongoing cyber conflict involving state-sponsored actors from China. The advisory emphasizes the need for collaboration between government and private sectors to mitigate these threats.