FBI seizes tools used by Chinese hacking group in Los Angeles
Federal agents in Los Angeles took control of malicious cyber tools tied to Chinese state hackers. The action disables software used to infiltrate critical infrastructure and computer networks worldwide. The Federal Bureau of Investigation and the Justice Department announced the joint cyber disruption on Thursday.
Officials identified the seized hacking software as programs called Microscan and FishHub. Hackers deployed Microscan against an unnamed American power company along with airports in Japan and Poland. The same program targeted universities and critical infrastructure across Taiwan.
FishHub helped hackers gain remote access into victim computer networks, the FBI said. Federal investigators stated the operation successfully rendered both tools inoperable. The software stopped working.
“We aim to remove the capability from the threat actors. We target their infrastructure, their money, and their tools,” FBI Cyber Division Deputy Assistant Director Jason Bilnoski said in an interview with the AP. Bilnoski called the online intrusion campaign indiscriminate and reckless.
The tools belonged to Integrity Technology Group, an information security company based in China. The FBI said the business maintains contracts with the government in Beijing. Federal authorities identify the company as the entity behind the campaign known as Flax Typhoon.
Chinese foreign ministry spokesperson Mao Ning said China enforces strict laws against computer crimes. Mao said Beijing opposes the spread of disinformation for political purposes.
“We urge the U.S. to abandon its double standards and political manipulation, and work with China through equal dialogue and consultation to jointly address cybersecurity risks,” Mao said.
In September 2024, federal agents dismantled a botnet linked to the same hacking group. That malicious network hijacked more than 200,000 consumer devices. Infected equipment included office routers, security cameras and digital video recorders.
The hijacked devices helped operators steal sensitive data from private computer networks. FBI San Diego Supervisory Special Agent Brett Lally said agents will monitor any recovery attempts.
“It’ll be interesting to see what this round of disruption actions have in terms of their ability to operate as a company in China,” Lally said.
Federal cyber units regularly seize command servers and disable malicious code during infrastructure investigations. These operations disrupt foreign hacking rings by dismantling digital instruments before intrusions spread. Threat teams often attempt to rebuild digital assets under new technical identities.
Federal investigators in Los Angeles continue to track related cyber activity across foreign networks. No criminal arrests were announced.
