美国司法部（DOJ）和联邦调查局（FBI）据《大纪元时报》（TET）报道，已查获七个据称由中国国家关联黑客使用的互联网域名，这些域名被用于针对美国及海外的关键基础设施和计算机网络。TET 报道称，这些查获行动于10月8日宣布，目标是据称由为北京网络安全公司“诚信科技集团”（Integrity Technology Group）工作的网络行动者操作的两款黑客工具，该公司与中国当局有合同。
The US Department of Justice (DOJ) and Federal Bureau of Investigation (FBI) have seized seven internet domains allegedly used by Chinese state-linked hackers to target critical infrastructure and computer networks in the United States and overseas, according to a report by The Epoch Times (TET).The seizures, announced on October 8, targeted two hacking tools allegedly operated by cyber actors working for Integrity Technology Group, a Beijing-based cybersecurity company with contracts with Chinese authorities, the TET report said.
据称这些工具被用于识别安全漏洞、未经授权进入计算机网络并窃取信息。美国及其盟国机构发布的联合网络安全警报称，由诚信科技支持的黑客通过结合自动扫描、受感染设备网络和有针对性的入侵，从全球组织中窃取敏感信息，包括美国关键基础设施运营商。据报告，宾夕法尼亚州的一名联邦地方法官于10月6日批准了查获令，授权将这些域名重定向至FBI控制的服务器。
The tools were reportedly used to identify security vulnerabilities, gain unauthorised access to computer networks and steal information.A joint cybersecurity advisory issued by US and allied agencies said hackers enabled by Integrity Tech combined automated scanning, networks of compromised devices and targeted intrusions to steal sensitive information from organisations worldwide, including US critical infrastructure operators. According to the report, a federal magistrate judge in Pennsylvania approved the seizure warrant on October 6, authorising the domains to be redirected to FBI-controlled servers.
司法部尚未对诚信科技集团提出刑事指控，也未就此次查获行动确定具体被告。为什么中国不愿加入世界发达国家的行列此次行动标志着美国在两年内第二次公开破坏与诚信科技相关的黑客基础设施。2024年9月，FBI 拆除了一个包含超过20万台感染的联网设备的网络，其中包括家用路由器和摄像头，调查人员称这些设备曾被用于网络行动。
The Justice Department has not announced criminal charges against Integrity Tech or identified individual defendants in connection with the seizures. Why China Doesn’t Want to Join the Ranks of the World’s Developed CountriesThe operation marks the second public US disruption of Integrity Tech-linked hacking infrastructure in two years. In September 2024, the FBI dismantled a network of more than 200,000 infected internet-connected devices, including home routers and cameras, which investigators said had been used for cyber operations.
然而，一份新近解封的FBI宣誓书表明，与诚信科技相关的工具此后仍然可访问。其中一款工具名为“微扫描”（Microscan），据称被用于扫描计算机网络中的漏洞，以便黑客随后加以利用。
A newly unsealed FBI affidavit, however, indicated that tools linked to Integrity Tech remained accessible afterward. One tool, known as Microscan, was allegedly used to scan computer networks for vulnerabilities that hackers could later exploit.
调查人员发现扫描活动涉及一家南卡罗来纳州电力公司、日本和波兰的机场、一家跨国非营利组织，以及在天然气和电力领域运营的台湾公司。
Investigators identified scanning activity involving a South Carolina power company, airports in Japan and Poland, a multinational nonprofit organisation and Taiwanese companies operating in the natural gas and electricity sectors.
法庭文件并未确认这些组织遭到成功入侵，尽管调查人员表示，两所台湾大学在其网络被扫描后遭到黑客攻击。
The court filings did not establish that those organisations were successfully breached, although investigators said two Taiwanese universities were hacked after their networks had been scanned.A second tool, FishHub, was reportedly used in targeted phishing campaigns to trick victims into opening malicious content.
据报道，第二种工具 FishHub 被用于定向网络钓鱼活动，诱骗受害者打开恶意内容。随后它可投放软件，让攻击者远程控制计算机、搜索文件并传输窃取的信息。司法部称，约 20 所台湾大学被确认为 FishHub 活动的受害者。
FBI 网络部助理主任布雷特·莱瑟曼表示，中国政权依赖承包商和赋能公司扩大其网络活动的覆盖面，并补充说，曝光并破坏此类实体会增加其针对美国网络和基础设施实施攻击的难度。
It could then deliver software allowing attackers to remotely control computers, search files and transfer stolen information. The Justice Department said around 20 Taiwanese universities were confirmed victims of FishHub activity.FBI Cyber Division Assistant Director Brett Leatherman said the Chinese regime relies on contractor and enabling companies to expand the reach of its cyber activity, adding that exposing and disrupting such entities makes it harder to target American networks and infrastructure.
2025 年 1 月，美国财政部因诚信科技涉嫌在归因于中国国家资助黑客的网络行动中扮演角色而对其实施制裁。该公司当时否认指控，称其缺乏事实依据，并坚称其合法经营。
Integrity Tech was sanctioned by the US Treasury Department in January 2025 over its alleged role in cyber operations attributed to Chinese state-sponsored hackers. The company rejected the allegations at the time, saying they lacked a factual basis and maintaining that it operated legally.
据 TET 报道，中国外交部发言人毛宁于 10 月 9 日回应时，拒绝了她所谓的政治动机虚假信息，并指责华盛顿搞双重标准。
China's Foreign Ministry spokesperson Mao Ning, responding on October 9, rejected what she described as politically motivated misinformation and accused Washington of double standards, according to TET.
英国也于 2025 年 12 月因诚信科技涉嫌参与针对英国公共部门系统的网络行动而对其实施制裁。
The UK also sanctioned Integrity Tech in December 2025 over its alleged involvement in cyber operations targeting British public-sector systems.
联合通报指出，目标涵盖政府服务、关键制造业、医疗卫生和信息技术等领域。
The joint advisory identified targets across government services, critical manufacturing, healthcare and information technology.
它还警告称，黑客利用大规模扫描和有针对性的攻击窃取凭证、维持未经授权的访问并提取敏感文件和电子邮件。TET报告称，这些机构敦促政府机构和关键基础设施运营商检查其网络以寻找被入侵的证据，修复已知漏洞，禁用不必要的服务，并加强账户保护。
It also warned that hackers used mass scanning and targeted attacks to steal credentials, maintain unauthorised access and extract sensitive files and emails. The agencies urged government bodies and critical infrastructure operators to search their networks for evidence of compromise, fix known vulnerabilities, disable unnecessary services and strengthen account protections, the TET report said.