Seven domains allegedly tied to Chinese-linked intrusion tools seized

Domains allegedly supporting Microscan and FishHub

The report says the FBI seized seven web domains allegedly associated with Integrity Technology Group. It says one domain was used to access the Microscan vulnerability scanner, while five others delivered FishHub malware. A joint advisory by agencies in the US, UK, Australia, Canada, Japan, New Zealand, and Spain also warned of alleged activity by Chinese government-linked attackers enabled by Integrity Tech.

The available account describes an earlier FBI action against a 260,000-device botnet in September 2024, but it does not establish a directly comparable prior state for the seven domains seized in this action.

According to the report, the seizure removed seven domains allegedly tied to Integrity Technology Group from use in delivering malware and supporting intrusion tools.

A joint advisory from agencies in seven countries

The reported action targets domain infrastructure alleged to support both malware delivery and intrusion operations. The accompanying advisory connects the alleged activity to organizations and critical-infrastructure networks, while preserving that these allegations are unverified here.