The U.S. Federal Bureau of Investigation and Department of Justice have taken action against a China-linked cyber group known as Flax Typhoon. The agencies seized several domains and blocked access to platforms used by the group to scan and infiltrate U.S. Critical infrastructure.
The operation targets an advanced persistent threat group believed to be associated with China. The FBI and DoJ identified the group as using malicious tools to conduct cyber intrusions. The domains seized were used to support these activities, including reconnaissance and potential exploitation of vulnerabilities in critical systems.
This disruption follows a series of cyberattacks attributed to the Flax Typhoon group. The group has been linked to attacks on energy, transportation, and other sectors vital to national security. The U.S. Agencies have worked with international partners to trace and neutralize the threat. The move underscores growing concerns about state-sponsored cyber operations targeting global infrastructure.
