started · updated
FBI arrests suspect in ShinyHunters hack and disrupts China-linked Flax Typhoon
Law enforcement agencies have announced significant progress in dismantling two major cybercriminal networks. The FBI has arrested a Canadian citizen in Pennsylvania suspected of being a primary co-conspirator in a hack by the ShinyHunters group. This group breached the FBI's jobs portal via a third-party vendor, potentially exposing the sensitive personal data of nearly all current and former FBI employees.
In a separate operation, the FBI and DOJ disrupted the hacking infrastructure of Flax Typhoon, a China-linked threat group. Authorities seized seven domains and neutralized two key tools, Microscan and FishHub, which were used for vulnerability scanning and spear-phishing. The group is allegedly linked to the Integrity Technology Group, a China-based firm with government contracts. Flax Typhoon has targeted critical infrastructure, including power companies in the US, airports in Japan and Poland, and various institutions in Taiwan.
Entities
CISA · China · Department of Justice · FBI · Flax Typhoon · Integrity Technology Group · Kash Patel · ShinyHunters
Claims
What the coverage asserts, and how many sources carry each claim.
- [○ 1 SOURCE] Hackers stole emails from government, healthcare, and law enforcement organizations in Southeast Asia, Africa, and North America.
- [● 4 SOURCES] The Microscan tool was used for vulnerability scanning to identify security gaps. hackread.com · www.news18.com · www.independent.co.uk
- [● 12 SOURCES] Integrity Technology Group, a China-based company with government contracts, is identified as the entity behind Flax Typhoon. hackread.com · www.news18.com · www.independent.co.uk · www.dgabc.com.br · bhaskarlive.in · +3 more
- [● 10 SOURCES] The FishHub tool supported spear-phishing operations to gain remote access to networks. hackread.com · www.news18.com · www.independent.co.uk · www.dgabc.com.br · bhaskarlive.in · +3 more
- [● 2 SOURCES] The FBI, CISA, NSA, and international partners issued a joint cybersecurity advisory regarding the threat. hackread.com
- [● 4 SOURCES] In September 2024, the FBI disrupted a botnet controlled by Integrity Technology Group containing over 200,000 devices. www.independent.co.uk · www.dgabc.com.br
- [● 10 SOURCES] The FBI and DOJ seized two hacking tools, Microscan and FishHub, used by the Flax Typhoon group. hackread.com · www.news18.com · www.independent.co.uk · www.dgabc.com.br · bhaskarlive.in · +3 more
- [● 10 SOURCES] Targets of the hacking included a South Carolina power company, airports in Japan and Poland, and institutions in Taiwan. www.news18.com · www.independent.co.uk · www.dgabc.com.br · bhaskarlive.in · vosveteit.zoznam.sk · +3 more
- [● 10 SOURCES] The tool Microscan was used for vulnerability scanning to identify security gaps. hackread.com · www.news18.com · www.independent.co.uk · www.dgabc.com.br · bhaskarlive.in · +3 more
- [● 3 SOURCES] Targets of the hacking included a US power company, airports in Japan and Poland, and universities and energy companies in Taiwan. www.news18.com · www.independent.co.uk
- [○ 1 SOURCE] Hackers stole emails from government, healthcare, and religious organizations across Southeast Asia, Africa, and North America.
- [● 2 SOURCES] Authorities seized seven domains used to support the hacking infrastructure. hackread.com · www.epochtimes.com