As cited
Copy frozen at (site build).
threat intel
CISA, FBI and NSA expose Integrity Technology Group’s role in China-linked attacks on critical infrastructure
U.S. government agencies (CISA, FBI, NSA) and international partners released a joint advisory exposing Integrity Technology Group, a China-based company with government links, as enabling Chinese threat actors to conduct large-scale campaigns against critical infrastructure and other organizations worldwide. The actors combine automated scanning, botnets, and hands-on exploitation to breach networks, steal email data and credentials, and maintain persistent access using legitimate virtual private network (VPN) software and custom tools. The advisory provides indicators of compromise, tactics and techniques, and recommends organizations strengthen defenses around internet-facing services, implement multifactor authentication (MFA), segment networks, and conduct threat hunting for evidence of unauthorized access.
Why it matters: Organizations operating critical infrastructure and cross-sector entities face persistent targeting by state-linked Chinese actors who position themselves for disruptive operations; practitioners must review the advisory's indicators of compromise and implement recommended mitigations, particularly around internet-facing systems, email security, VPN monitoring, and credential protection.
- Source published
- First seen by Cybersecurity Tracker