The global cyber war · Attribution and response

US Justice Department and FBI seize two hacking tools they say China-based Integrity Technology Group operated

Reported1 distinct origin, 0 independent.

The US Justice Department and FBI announced court-authorised seizures of two hacking tools, Microscan and FishHub, which they said malicious cyber actors working for the China-based Integrity Technology Group operated and used to scan and sometimes hack critical infrastructure. The department said the company has contracts with the PRC government and associated the tools with actors it calls Flax Typhoon. It said Microscan targets included a US power company in South Carolina, Japanese and Polish airports and Taiwanese gas and power companies, and that FishHub victims included about 20 Taiwanese universities. No response from China or the company was found.

When
8 October 2026
Where
United States, the US
What
legal
Acting party
Government of the United States
Against
Integrity Technology Group
Attribution
Acknowledged by the acting party. The US Justice Department announced the seizures as its own act. The release title calls the users China-State Sponsored Hackers; China and the company were not found to have answered.
In the record
Published 2026-11-09 22:52 UTC · backfilled

Sources

  1. Evidence US Department of Justice Official, third state · Not yet classified origin: US Department of Justice press release, 8 Oct · published 2026-10-08 00:00 UTC malicious cyber actors working for Integrity Technology Group

History

Cite or reuse

The War Record, "US Justice Department and FBI seize two hacking tools they say China-based Integrity Technology Group operated", record ev-20261109-hk99, version 1, https://thewarrecord.com/events/ev-20261109-hk99/

This month's events as JSON (id ev-20261109-hk99) · CC BY 4.0