U.S. Launches Major Crackdown on Chinese Hacking Network

The United States has intensified its efforts against hackers linked to China-based Company Integrity Technology Group as part of a broader campaign to counter cyber security threats originating from China. According to the latest information released by the U.S. Department of Justice, authorities have taken control of and blocked seven internet domains used by the hackers in a recent operation. Officials say Chinese hackers were using these domains to scan critical and sensitive cyber systems in the United States and other countries and attempt to infiltrate them through cyber-attacks.  This is the second major publicly announced action by the U.S. Department of Justice against Integrity Technology Group’s hacking network. In September 2024, following court authorization, an operation dismantled a botnet operated by the same company. The network had reportedly compromised more than 250,000 user devices and computers worldwide, including in the United States.

At the time, then-FBI Director Christopher Wray accused Integrity Tech of supporting China’s prominent hacking group, Flax Typhoon, which had been linked to reconnaissance and intelligence-gathering operations on behalf of Beijing’s security agencies. The Chinese Embassy in Washington, however, did not respond to the report.

Earlier, in August, the United States also accused China of conducting state-sponsored cyberattacks against several major institutions, including NASA, the U.S. Senate, and the Federal Reserve. During that operation, the U.S. government seized domains associated with two hacking platforms known as “Qscan” and “Q Router.” The platforms were reportedly operated by groups backed by the Chinese state. Beijing, meanwhile, has strongly denied involvement in any illegal cyber activity and has sharply criticized Washington for allegedly using cybersecurity concerns as a pretext to discredit China.