FBI says China-linked hackers operate stolen email access portal
Start here
On October 8, the FBI and agencies from 6 other countries said that hackers linked to Chinese cybersecurity company Integrity Technology Group stole emails from Southeast Asian government agencies, law enforcement, healthcare systems, and religious organizations, and operated a web application that provided third parties with access to the stolen email content; the hackers had been breaking into networks since at least mid-January 2021, using a MicroScan scanner containing more than 1300 scripts as well as tools such as Nmap, masscan, and WPScan, and successfully exploited 8 known vulnerabilities. Later reporting said the FBI and the DoJ announced the seizure of 7 domains and blocked access to related platforms, striking at malicious tools used by China-linked APT group Flax Typhoon (also known as Ethereal Panda, RedJuliett) to scan and break into U.S. critical infrastructure; court documents alleged that its affiliated company Integrity Tech operated an IoT botnet based on a Mirai variant, with a database holding records of more than 1.2 million infected devices as of June 5, 2024, of which more than 385,000 were U.S. devices.
Generated by AI from reports · Updated 3 days ago
Event progress
- · 1 reportsFBI查封Flax Typhoon相关7个域名
- · 1 reportsFBI says China-linked hackers operate stolen email access portal
Progress timeline
- The Hacker NewsFBI 查封 7 个域名，打击 Flax Typhoon 关键基础设施入侵工具
FBI 与 DoJ 宣布查封 7 个域名并阻断相关平台访问，打击与中国关联的 APT 组织 Flax Typhoon（又称 Ethereal Panda、RedJuliett）用于扫描和入侵美国关键基础设施的恶意工具。法庭文件指控其关联公司 Integrity Tech 运营基于 Mirai 变种的 IoT 僵尸网络，截至 2024 年 6 月 5 日数据库存有超 120 万台受感染设备记录，其中美国设备逾 38.5 万台。该组织还使用 Microscan 扫描工具和 FishHub，后者相关活动已确认 20 所台湾高校受害。
- The Hacker NewsFBI 称与中国关联的黑客运营门户，向第三方提供窃取邮件访问权限
FBI 与另外 6 国机构 10 月 8 日称，与中国网络安全公司 Integrity Technology Group 关联的黑客窃取了东南亚政府机构、执法部门、医疗系统和宗教组织的邮件，并运营一个向第三方提供被盗邮件内容访问权限的 Web 应用。黑客自至少 2021 年 1 月中旬起入侵网络，使用含 1300 多个脚本的 MicroScan 扫描器及 Nmap、masscan、WPScan 等工具，成功利用 8 个已知漏洞，其中 5 个被列入 CISA 的 KEV 目录。英国 NCSC 称其独特地使用自动化扫描等 AI 工具，但联合公告本身未提及 AI。
Related discussion
Attention trend
New sources per day
- Oct 9New1 sources (1 outlets,0 accounts)
- Oct 10New0 sources (0 outlets,0 accounts)
- Oct 11New0 sources (0 outlets,0 accounts)
- Oct 12New0 sources (0 outlets,0 accounts)