The United States has imposed sanctions on Beijing-based cybersecurity company Integrity Technology Group, Incorporated (Integrity Tech), citing its role in multiple computer intrusion incidents against US victims. Integrity Tech, a large government contractor with ties to China’s Ministry of State Security, provides services to various Chinese government agencies and cybersecurity contractors.
Hackers working for Integrity Tech, known as “Flax Typhoon,” have targeted critical infrastructure in the US and overseas, successfully compromising multiple US and foreign corporations, universities, government agencies, and media organizations. The group’s tactics include exploiting publicly known vulnerabilities to gain initial access to victims’ computers and using legitimate remote access software to maintain control over their networks.
In response to these threats, the US Department of Justice announced a court-authorized operation to disrupt a botnet of over 200,000 consumer devices infected by Integrity Tech. The US also issued a public cybersecurity advisory with Five Eyes partners, outlining the tactics employed by Chinese-linked cyber actors and providing technical information to network defenders.
These efforts reflect the US government’s commitment to protecting Americans and critical infrastructure from Chinese cyber threats. The sanctions against Integrity Tech demonstrate the US’s willingness to use all available tools to safeguard national security and hold irresponsible cyber actors accountable.
