FBI and DOJ Disrupt Flax Typhoon Infrastructure Targeting Critical Networks

The FBI and the U.S. Department of Justice have seized seven domains used to operate Microscan and FishHub, two tools attributed to the Chinese group Flax Typhoon. The platforms were used to identify vulnerable systems and, in some cases, infiltrate critical infrastructure, energy companies, universities, and other organizations in the United States and abroad. Authorities have linked the tools to Integrity Technology Group, a Beijing-based company that holds contracts with the Chinese government, while the United States, the United Kingdom, and their allies have issued a joint advisory regarding its activities. CISA has also added five vulnerabilities exploited by the group to its Known Exploited Vulnerabilities catalog, setting an October 11 deadline for U.S. federal agencies to implement corrective measures. The seizure temporarily reduces the campaign’s operational capabilities, but it does not eliminate access already obtained or the attackers’ alternative infrastructure. The operation confirms that Flax Typhoon poses a persistent threat to exposed systems and legacy equipment within strategic networks.

Source: The Hacker News