IC Technology & Cyber — 2026-10-12
US Seizes China-Linked Integrity Tech Cyber Espionage Tools in Seven-Nation Operation
BLUFIntegrity Tech's targeting of power grids, airports, and gas infrastructure across four countries signals pre-positioning for disruption, not espionage, and domain seizures alone will not stop it.
The Justice Department and FBI announced on Thursday court-authorized seizures of domains supporting two tools, Microscan and
Analysis
Sharing the advisory exposes Integrity Tech's tooling to every partner government, which raises the cost of rebuilding Microscan and FishHub. The targeting matters more than the seizures: a South Carolina utility, airports in Japan and Poland, and Taiwanese gas and power firms point to reconnaissance of operational infrastructure, not data theft alone. This is the company's second disruption in two years, following the September 2024 botnet takedown and January 2025 sanctions, and it has not stopped operating. It can rebuild on new domains and recruit new IoT devices, so seized indicators are only a starting point. Power, aviation and university operators should check logs back to 2017. Sourcing rests on one Justice Department release, and the outlets only amplify it. The action may be mainly signaling, with little lasting effect on China's capacity.
Sharing the advisory exposes Integrity Tech's tooling to every partner government, which raises the cost of rebuilding Microscan and FishHub. The targeting matters more than the seizures: a South Carolina utility, airports in Japan and Poland, and Taiwanese gas and power firms point to reconnaissance of operational infrastructure, not data theft alone. This is the company's second disruption in two years, following the September 2024 botnet takedown and January 2025 sanctions, and it has not stopped operating. It can rebuild on new domains and recruit new IoT devices, so seized indicators are only a starting point. Power, aviation and university operators should check logs back to 2017. Sourcing rests on one Justice Department release, and the outlets only amplify it. The action may be mainly signaling, with little lasting effect on China's capacity.
5 sources
- FBI seizes websites supporting Chinese contractor's hacking operations -
Nextgov - US Disrupts China-Linked Integrity Tech Cyber Espionage Tool -
CyberMaterial - FBI Seizes 7 Domains, Disrupts Flax Typhoon -
The Hacker News - Flax Typhoon China tools Integrity Tech international takedown -
The Record - Justice Department and FBI Seize Vulnerability Scanning and Spear Phishing Tools Operated and Used by China-State Sponsored Hackers -
U.S. Department of Justice, Office of Public Affairs