The FBI seized seven web domains linked to Chinese security firm Integrity Technology Group, which allegedly provided hacking tools — including a vulnerability scanner and malware — used by Beijing-backed hackers known as Flax Typhoon to target critical infrastructure worldwide, including a South Carolina power company. A joint advisory from seven governments warned that these actors use botnets, malware, and various intrusion techniques to steal sensitive data from organisations globally, prompting CISA to add five new CVEs to its Known Exploited Vulnerabilities Catalog. Despite the partial dismantling of Flax Typhoon's 260,000-device botnet in 2024, Western governments and security researchers warn that Chinese state-sponsored hacking activity against critical infrastructure continues unabated.
