Skip to content
Brief Security & Trust ·

US seizes websites behind two Chinese hacking tools tied to Integrity Tech

The Justice Department took over websites for Microscan and FishHub, tools used in the Flax Typhoon campaign, The Record reported.

In brief
  • The Justice Department seized multiple websites behind Microscan and FishHub, two tools tied to Integrity Tech. The Record did not say how far this limits the hackers.
  • CISA and the NSA said the firm typically targeted lightly monitored edge devices. Several hacking groups use its tools.

The Record reported on Thursday that the U.S. Justice Department seized multiple websites behind two hacking tools, Microscan and FishHub. The FBI's Brett Leatherman said Integrity Tech gave China-linked hackers tools for wide scanning and, in some cases, break-ins. Court documents say the firm built Microscan to find weak spots, and FishHub to speed up phishing and load malware after a breach. Victims include a South Carolina power company, airports in Japan and Poland, and about 20 Taiwanese universities. Six other countries, among them Japan and the U.K., joined a 58-page advisory.

The Record does not say how many sites were seized or how much this limits the hackers. It reports no arrests or charges. It says Integrity Tech also acquires, sells or hosts tools that several groups use. CISA and the NSA said the firm typically went after edge devices, which sit at a network's border and get little monitoring. That gave hackers quiet, long-term access.

Scanning finds the weak spot, phishing tools plant malware, and an unwatched edge device keeps access open. Several groups use tools from this supplier, so defence rests partly on your own devices. Ask which edge devices are monitored, which on-premise email servers are exposed, and who owns that list.

A WebPulse Brief: a short report of an important event, written by the WebPulse Newsroom with AI assistance and checked against the reporting below. When there is more to explain, we follow up with a full story. How we use AI.

Reporting: The Record.