FBI seizes Chinese hacking tools used for cyberattacks on critical U.S. infrastructure

The FBI has seized scanning and phishing tools utilized by a hacking group, believed to be linked to the Chinese government, responsible for disruptive cyber operations worldwide. The seizure followed a joint announcement by the FBI and Justice Department, highlighting a persistent effort to combat the Flax Typhoon hacking campaign.

The confiscated tools, dubbed "Microscan" and "FishHub," were employed to infiltrate and exploit U.S. and foreign critical infrastructure, including an unnamed U.S. power company, Japanese and Polish airports, Taiwanese universities, and various critical infrastructure companies in Taiwan. "Microscan" enabled the hackers to scan and compromise targets, while "FishHub" facilitated phishing activities that granted unauthorized access to victim networks.

The operation rendered these tools unusable, according to officials, posing a significant setback to the malicious actors. FBI Cyber Division Deputy Assistant Director Jason Bilnoski emphasized the importance of dismantling the threat actors' infrastructure, capabilities, and resources. Microscan and FishHub belonged to Integrity Technology Group, a Chinese-based information security company with alleged ties to the Chinese government.

FBI officials described the hacking operation as indiscriminate and reckless. Beijing's foreign ministry spokesperson, Mao Ning, defended the company, stating that China prosecutes hacking activities in accordance with the law and opposes spreading disinformation for political gains. The ministry urged the U.S. to abandon double standards and engage in equal dialogue to address cybersecurity challenges.

The FBI has previously disrupted a massive botnet associated with Flax Typhoon, which had compromised over 200,000 consumer devices, used to carry out cybercrimes such as sensitive data theft. FBI officials remain vigilant, monitoring potential re-establishment of the company's infrastructure in China.