International coalition seizes tools used by cyber firm behind Flax Typhoon
A US-led coalition seized Flax Typhoon tools Microscan and FishHub operated by China's Integrity Tech.
US and allied cyber agencies announced seizures of websites supporting Microscan and FishHub, tools built by Beijing-based Integrity Technology for China-linked activity associated with Flax Typhoon. Officials said the company, hired by China's Ministry of State Security, supported vulnerability scanning and intrusions against universities, government, telecommunications, media, and critical infrastructure. A 58-page advisory says Microscan has scanned for vulnerabilities since 2017, FishHub enabled phishing and malware delivery, and EBurst password-sprayed Microsoft Exchange accounts to steal email. The FBI previously disrupted the group's Mirai-based botnet of more than 260,000 devices in September 2024.