US targets Chinese firm’s alleged hacking network

The United States has launched a new operation to disrupt internet infrastructure allegedly used by hackers linked to Chinese technology company Integrity Technology Group.

The US Department of Justice announced on Thursday that authorities were seizing seven internet domains suspected of supporting cyberattacks against critical infrastructure in the United States and other countries.

According to the department, the domains were being used by hackers to scan computer networks and identify potential targets for cyber intrusions. The operation aims to disrupt the digital systems allegedly used to support these activities.

The latest action marks the second publicly announced US effort to target hacking infrastructure associated with Integrity Technology Group. In September 2024, American authorities carried out a court-authorised operation against a botnet linked to the company. The network reportedly consisted of more than 250,000 compromised consumer devices across the United States and other parts of the world.

A botnet is a group of computers and internet-connected devices that have been infected or compromised and can be controlled remotely. Cybercriminals and other malicious actors can use such networks to conduct attacks, gather information or hide their activities.

Former FBI Director Christopher Wray previously linked Integrity Technology Group to a Chinese hacking operation known as Flax Typhoon. He said the group carried out intelligence gathering and reconnaissance activities on behalf of Chinese security agencies.

The latest US operation reflects continuing efforts by American authorities to protect critical infrastructure from cyber threats. Such systems include networks and digital services that support essential sectors, including communications, energy and other important public services.

The Chinese Embassy in Washington did not immediately respond to a request for comment on the latest action. Beijing has repeatedly denied allegations that it conducts hacking operations.

The seizure of the seven domains is intended to weaken the infrastructure allegedly used in the cyber activities. However, the US announcement did not provide further details about the domains or disclose the full extent of the suspected hacking operations.