US launches cybersecurity operation to disrupt China-linked hacking network

The US has launched a crackdown on cybersecurity threats emanating from the hackers working with Chinese IT firm Integrity Technology Group.

As per the latest update issued by the Department of Justice, the recent crackdown is based on seizing seven internet domains in an effort to disrupt hackers.

These domains were being manipulated just to help Chinese hackers scan and breach US and foreign critical infrastructure systems.

This marks the Department's second public operation targeting Integrity Tech's hacking network.

A prior court-approved action in September 2024 dismantled an Integrity Tech botnet that had compromised over 250,000 consumer devices globally and within the US.

At the time, then-FBI Director Christopher Wray accused Integrity Tech for supporting major Chinese hacking group “Flax Typhoon” who was found complicit in carrying out intelligence gathering and reconnaissance ⁠functions for Beijing's security agencies.

However, China’s embassy in Washington did not respond to this report.

In August, the US also blamed China for allegedly being responsible for waging “state-sponsored” hacking times on several institutions including NASA, Senate and the Federal Reserve.

The government had captured two internet domains belonging to two hacking platforms called QScan and QTRouter. The statement alleged that these domains were created and operated by a Chinese state-sponsored group.

However, Beijing denied any wrongdoing and slammed the US for smearing the country under the pretext of cybersecurity.