The United States Department of Justice has seized seven internet domains tied to an alleged hacking network linked to the Chinese IT firm Integrity Technology Group. According to American officials, the domains were actively used by hackers to monitor and infiltrate computer systems connected to critical infrastructure within the United States and other nations. The enforcement marks the second publicly announced action aimed at dismantling cyber infrastructure associated with the company, forming part of a wider effort by Washington to counter state-linked digital espionage.
Federal Action Targets Critical Infrastructure Threats
Officials stated that the targeted web addresses facilitated illicit digital surveillance against essential networks, including systems that support energy, communications, and transportation services. Unauthorised access to these environments allows operators to extract sensitive technical data and pinpoint system vulnerabilities prior to launching deeper network intrusions. While court authorisations enabled the domain seizures, authorities did not disclose the identities of the specific targets or provide technical profiles for all seven web addresses. Security analysts observe that while seizing web domains eliminates immediate operational conduits, it does not guarantee the permanent elimination of all secondary network activity or prevent operators from configuring replacement systems.
Second Enforcement Move Following 2024 Botnet Disruption
The current operation builds on a previous court-authorised initiative carried out in September 2024 against an expansive botnet attributed to Integrity Technology Group. That network compromised more than 250,000 internet-connected consumer devices across the globe, including routers and computer terminals located inside the United States. Federal investigators, led at the time by then-FBI Director Christopher Wray, connected Integrity Technology Group directly to Flax Typhoon, a prominent hacking outfit accused of gathering strategic intelligence for Chinese security services. The systemic hijacking of consumer hardware provided operators with remote relays to probe institutional defences without routing traffic directly through identifiable state facilities.
Beijing Rejects Accusations Amid Bilateral Tensions
Responding to the enforcement action, the Chinese Foreign Ministry dismissed the allegations during a regular press briefing in Beijing. Foreign Ministry spokesperson Mao Ning stated that China firmly opposes cyber attacks along with the spread of malicious disinformation. She affirmed that Beijing remains willing to manage digital risks through cooperative engagement with Washington, provided discussions occur on the basis of mutual respect. Mutual accusations surrounding digital surveillance remain a central point of friction between the two governments, as law enforcement agencies continually confront the challenge of disabling persistent adversarial networks capable of shifting assets across international internet infrastructure.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
