Skip to content
Threat Feed
Subscribe

Actor

Ethereal Panda

2 briefs RSS
Also known as: Flax Typhoon
high threat

Disruption of Integrity Technology Group Hacking Tools

The US government disrupted infrastructure supporting Integrity Technology Group tools MicroScan and FishHub, which Chinese state-sponsored actors, including Flax Typhoon, used to compromise critical infrastructure.

Struts +6 Flax Typhoon +1 state-sponsored intelligence-disruption critical-infrastructure espionage
3t 6i
medium threat

Flax Typhoon Masquerading SoftEther VPN as Legitimate Windows Binaries

The Flax Typhoon group uses SoftEther VPN, masquerading the VPN client as legitimate Windows binaries like conhost.exe and dllhost.exe, to obfuscate their network activity within compromised Taiwanese organizations.

SoftEther VPN +3 Flax Typhoon +1 flax-typhoon defense-evasion lateral-movement vpn process-masquerading
2r 2t