China-Linked Hackers Stole Email from Global Organizations

Hackers linked to the Chinese cybersecurity firm Integrity Technology Group stole emails from government, law enforcement, healthcare, and religious institutions in Southeast Asia, the FBI and other agencies reported. The group used tools like MicroScan, which contains over 1,300 penetration testing scripts, to exploit vulnerabilities in networks. They also ran a portal providing third-party access to stolen email content. The hackers employed methods such as password spraying and fake logins to gain access, often using legitimate tools like SoftEther VPN to maintain persistence. The FBI disrupted a botnet controlled by the group in 2024, but the new advisory details how the hackers infiltrate networks and exfiltrate data.