US agencies seize tools linked to Chinese firm used to spy on critical infrastructure

The Justice Department and FBI announced on Thursday that they took control of websites for two specific hacking tools. These tools are linked to a group called Flax Typhoon which has operated in the region for years.

Officials say this firm behind the software is Integrity Technology Group, based in China. They state that the company helps actors connected to their government with cyber operations.

Microscan scans network systems looking for weak points that hackers can use to enter. FishHub helps attackers place malicious software onto the machines they have entered.

Victims of these tools include power companies and airports across different countries. Taiwanese universities also suffered data loss from the programs used by these groups.

A joint warning was issued to alert others about the ongoing threat level. The FBI, CISA, and NSA all contributed information for this advisory document.

Agencies from other nations helped create the statement as well during this investigation. Officials from Australia, Japan, Spain, and the United Kingdom participated in the review process.

Past actions against the company show a pattern of interference over time with prior disruptions. One effort earlier involved disrupting a large network of internet-connected devices, or botnet, used for these crimes.

Officials warn the attackers may remain hidden inside critical systems for later action by them. They could target operational technology systems, which are digital controls for physical infrastructure like power grids.

Experts say Integrity Technology Group develops tools for government training simulations and cyber ranges. These assets help enable attacks on private and public sectors worldwide with advanced methods.

The government plans to continue pursuing the people who carry out the attacks in this campaign. Authorities also aim to stop the businesses that supply them with digital weapons.