In brief
The U.S. Treasury has taken action against a Chinese cybersecurity firm believed to have facilitated foreign cyber attacks on U.S. communications.
The Treasury Department has enacted sanctions against Integrity Technology Group, a cybersecurity firm based in Beijing, accusing it of backing a Chinese hacking group, Flax Typhoon, which was implicated in extensive cyber espionage activities from 2022 to 2023. The department released a statement revealing that Flax Typhoon had been regularly communicating with Integrity Tech's infrastructure to launch infiltration campaigns against various foreign networks. This follows a recent alert from the FBI, which reported having dismantled a network of around 200,000 compromised devices used by Flax Typhoon in attacks across the globe, including within the United States. The sanctions, announced on Friday, come on the heels of revelations that a Chinese intelligence agency had infiltrated the Treasury Department's systems, gaining access to sensitive workstations and unclassified documents. However, officials did not clarify whether Flax Typhoon was specifically involved in this breach. Integrity Technology Group is now barred from receiving any financial transactions from U.S. individuals or institutions, and all of its assets within the United States have been frozen. This move represents a broader strategy by the U.S. to disrupt state-sponsored cyber threats, especially as Chinese intelligence-related hacking groups, such as Salt Typhoon, have also been implicated in significant breaches of U.S. telecommunications.Bradley T. Smith, acting under secretary of the Treasury, emphasized the U.S. commitment to holding cybercriminals accountable and safeguarding both public and private sector cyber defenses. With the Treasury Department's oversight of national security threats and sanctions, it remains a prime target for malicious actors.
