Hackers linked to Chinese cybersecurity firm Integrity Technology Group have been stealing emails from government agencies, healthcare systems, law enforcement, and religious institutions across multiple regions since at least 2021, according to a joint advisory from the FBI and six other countries. The group exploited known software vulnerabilities, used password-spraying tools, and deployed legitimate software like SoftEther VPN to maintain access, while also operating a web portal that gave third parties access to the stolen email content. The U.S. and UK have sanctioned Integrity Technology Group, and authorities are urging organizations to apply patches, enforce multifactor authentication, and monitor for signs of compromise.
