DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub

The Justice Department and FBI seized domains tied to two hacking tools linked to China-linked group Flax Typhoon and Integrity Technology Group: the vulnerability scanner Microscan and the spearphishing tool FishHub. The court-authorized seizures were granted in the Western District of Pennsylvania, paired with a joint advisory from the FBI, CISA and NSA.

• Domains for scanner Microscan and spearphishing tool FishHub were seized
• Tools were built by China-based Integrity Technology Group, sanctioned by the US in 2025
• Microscan targeted a South Carolina power company and airports in Japan and Poland
• FishHub victims include Taiwanese universities