FBI Confiscates Hacking Tools Linked to Chinese Cyber Threats

WHO:

Fast Company - The FBI and Justice Department announced the seizure of hacking tools.

Fast Company - The hacking group is associated with the Chinese government and is referred to as Flax Typhoon.

Fast Company - The tools were operated by a Chinese-based information security company called Integrity Technology Group.

WHAT:

Fast Company - The FBI seized scanning and phishing tools named "Microscan" and "FishHub."

Fast Company - The tools were used for cyberattacks on critical infrastructure, including the power industry and academia.

Fast Company - The FBI's operation rendered the hacking tools inoperable.

Fast Company - In September 2024, the FBI disrupted a botnet associated with Flax Typhoon that infected over 200,000 consumer devices.

WHERE:

Fast Company - The tools targeted entities in the U.S., Japan, Poland, Taiwan, and included a power company in the U.S. and Taiwanese critical infrastructure companies.

WHEN:

Fast Company - The seizure of the tools was announced on a Thursday.

Fast Company - The FBI disrupted the botnet in September 2024.

WHY:

Fast Company - The FBI aims to remove capabilities from threat actors and target their infrastructure, money, and tools.

Fast Company - The hacking operation is described as "indiscriminate and reckless" by FBI Cyber Division Deputy Assistant Director Jason Bilnoski.

HOW:

Fast Company - "Microscan" was used to scan and target various entities, while "FishHub" facilitated phishing activities for remote access to victim networks.

(UPDATED October 9, 2026 16:03 UTC)

The FBI and Justice Department have announced the seizure of hacking tools associated with the Chinese government, specifically a group known as Flax Typhoon, which operated through a Chinese-based information security company called Integrity Technology Group. The tools, named "Microscan" and "FishHub," were used for cyberattacks on critical infrastructure, including the power industry and academia, and the FBI's operation has rendered them inoperable. This action follows the FBI's disruption of a botnet linked to Flax Typhoon in September 2024, which had infected over 200,000 consumer devices across multiple countries, including the U.S. and Taiwan.