Thebusinessjournal FBI Seizes Domains and Tools Used by Chinese Hackers
Article Content
- •FBI seized seven domains linked to Chinese hackers on October 8, 2026.
- •The tools MicroScan and FishHub were used for scanning and phishing attacks.
- •The operation is part of ongoing efforts against the Flax Typhoon hacking group.
On October 8, 2026, the FBI and Justice Department seized seven domains linked to Chinese hackers associated with Integrity Technology Group, which allegedly provided tools for cyber operations targeting critical infrastructure. The seized tools, MicroScan and FishHub, were used for network scanning and spear-phishing attacks against U.S. and foreign entities, including power companies and universities. This operation follows previous disruptions of the Flax Typhoon botnet, which infected over 200,000 devices in September 2024. The seizure aims to disrupt the hackers' capabilities, although the compromised devices remain unaffected. The FBI has indicated that the operation is part of a broader strategy to target malicious cyber actors linked to state-sponsored activities. The Chinese government has denied the allegations, calling them politically motivated.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track Ethereal Panda, Flax Typhoon Botnet and Integrity Technology Group in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What are the tools involved?
Who is affected by these operations?
What should organizations do now?
Continue Reading
Chinese Cyber Actors Exploit Vulnerabilities via Integrity Technology Group Chinese government-linked cyber threat actors, associated with Integrity Technology Group, are using a combination of automated tools and hands-on techniques to exploit vulnerabilities and steal sensitive data from organizations globally. They target critical infrastructure sectors, including government, healthcare… 
Integrity Technology Group Linked to Chinese Cyber Operations Against Critical Infrastructure The U.S. Cybersecurity and Infrastructure Security Agency (CISA), FBI, and NSA have identified Integrity Technology Group, a China-based company, as a facilitator of cyberattacks targeting critical infrastructure worldwide. The advisory highlights that Chinese government-linked actors are using automated scanning…