A Hard Blow to China: US Foils Largest Global Cyber Espionage Operation

The US Federal Bureau of Investigation (FBI) and the Department of Justice announced the seizure of electronic tools used in network scanning, phishing, and information system breaches.

US officials attributed these activities to a hacking group allegedly linked to the Chinese government.

This move comes within the framework of US efforts aimed at dismantling a large-scale hacking campaign known in security circles as "Flax Typhoon," which is suspected of targeting vital sectors inside and outside the United States, including energy, education, and critical infrastructure.

According to US officials, the group used two electronic tools, "MykScan" and "Fish Hat," to conduct reconnaissance and breach operations targeting institutions and facilities in several countries.

The list of targets included an unnamed US energy company, airports in Japan and Poland, universities in Taiwan, along with a multinational non-governmental organization and companies working in the field of critical infrastructure in Taiwan.

The FBI clarified that the "Fish Hat" tool was also used in phishing operations that enabled hackers to remotely access the networks of targeted entities.

The recent US operation resulted in disabling the tools used in these activities and taking them out of service, a step described by officials from the FBI and the Department of Justice as a blow to the group's operations and technical capabilities.

For his part, Jason Bilnoski, Deputy Assistant Director of the Cyber Division at the FBI, said in an interview with the Associated Press agency that the goal is to reduce the capabilities of entities that pose a cyber threat, by targeting their infrastructure, funds, and tools.

The bureau noted that the seized tools were managed by "Integrity Technology Group," an information security company based in China, which US officials claimed has contracts with the Chinese government.