[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-seven-nations-tie-chinese-firm-to-global-hacking-campaign":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},10777,"seven-nations-tie-chinese-firm-to-global-hacking-campaign","Seven Nations Tie Chinese Firm to Global Hacking Campaign","Integrity Technology Group blends off-the-shelf scanners with hands-on intrusion to steal data, and seven countries just said so publicly.","Seven countries' cybersecurity and law enforcement agencies just named the company enabling a wave of Chinese state-linked hacking.\n\nThe FBI, CISA, and NSA, along with counterparts in the UK, Australia, Canada, Japan, New Zealand, and Spain, published a joint advisory tying Integrity Technology Group to intrusions across government, healthcare, manufacturing, and IT networks, plus law enforcement, education, and religious organizations in Southeast Asia, Africa, and North America. The playbook mixes open-source scanning tools like Fscan, masscan, and wpscan with cross-site-scripting attacks and password spraying against Microsoft Exchange servers. Once inside, the actors install VPN software for persistent access and run scripts to pull out emails and credentials. Eight of the exploited vulnerabilities date back as far as 2014, with the newest from 2023.\n\nIntegrity Technology Group looks less like a single hacking crew and more like a contractor supplying tools, hosting, and access to multiple state-linked campaigns. The advisory ties its fingerprints to activity also tracked as Flax Typhoon, Ethereal Panda, and Red Juliett, which suggests a shared supply chain rather than one group working alone. That vendor model is what makes this kind of operation hard to shut down - sanction one front and the infrastructure just gets resold under a new name.\n\nThe oldest vulnerability on the list is more than a decade old. That says less about the sophistication of Chinese state-linked hacking than about how many organizations still haven't patched a bug from 2014.","[\"china\",\"cybersecurity\",\"critical-infrastructure\",\"cisa\"]","2026-10-08T12:00:00.000Z","2026-10-09T12:44:41.727Z","2026-10-09T12:44:45.206Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"The opening line claims 'eight countries' cybersecurity agencies' but the sentence that follows names only seven nationalities (US, UK, Australian, Canadian, Japanese, New Zealand, Spanish) — fix the count to match the agencies actually listed.","resolved","security",[32,33,34,35],"china","cybersecurity","critical-infrastructure","cisa",[37],{"name":38,"url":39},"CISA Advisories","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fcybersecurity-advisories\u002Faa26-281a",0,{"sections":42},[43,48,52,57,62,67,72,77,82,87,92,97,102,107],{"name":44,"slug":45,"count":46,"latest_published_at":47},"AI","ai",6534,"2026-10-08T20:04:26.000Z",{"name":49,"slug":30,"count":50,"latest_published_at":51},"Security",923,"2026-10-08T19:57:17.000Z",{"name":53,"slug":54,"count":55,"latest_published_at":56},"Policy","policy",481,"2026-10-08T19:45:00.000Z",{"name":58,"slug":59,"count":60,"latest_published_at":61},"Deals","deals",473,"2026-10-08T20:20:51.000Z",{"name":63,"slug":64,"count":65,"latest_published_at":66},"Hardware","hardware",228,"2026-10-08T20:31:56.000Z",{"name":68,"slug":69,"count":70,"latest_published_at":71},"Science","science",188,"2026-10-08T15:28:36.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Consumer Tech","consumer-tech",180,"2026-10-08T18:21:59.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Startups","startups",117,"2026-10-08T16:45:00.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Software","software",114,"2026-10-08T17:57:01.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Dev Tools","dev-tools",105,"2026-10-07T16:59:11.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"General","general",65,"2026-10-08T19:06:41.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"Gaming","gaming",58,"2026-10-08T20:08:45.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"Reviews","reviews",34,"2026-10-08T14:00:22.000Z",{"name":108,"slug":109,"count":110,"latest_published_at":111},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]