DOJ and FBI Seize Domains Behind Hacking Tools Used by China-Linked “Flax Typhoon” Actors

The U.S. Justice Department and FBI announced seizures of domains supporting two hacking tools, “Microscan” and “FishHub,” which were operated by actors working for PRC-based Integrity Technology Group. Microscan used a Mirai-variant botnet of internet-of-things devices to scan for vulnerabilities for clients to exploit, with targets including a U.S. power company, a multinational NGO, Japanese and Polish airports, and Taiwanese critical infrastructure and universities. FishHub facilitated spear phishing and follow-on malware delivery, with approximately 20 Taiwanese universities among confirmed victims.