FBI Exposes China-Linked Hackers Running Web Portal for Stolen Government Emails

A joint advisory from the FBI and six international agencies revealed that Chinese cybersecurity firm Integrity Technology Group orchestrated widespread email theft across global government networks. The hackers built a custom web application that allows unidentified third parties to view the contents of compromised email accounts simply by manipulating URL parameters. Attackers utilized a Python-based scanner named MicroScan containing more than 1,300 penetration testing scripts alongside open-source tools like EBurst for password spraying Microsoft 365 and Exchange interfaces. The advisory identifies eight known exploited vulnerabilities—five of which are newly added to the CISA catalog—affecting services like Apache Struts and Oracle WebLogic. "The use of open source tools typically found on GitHub suggests the threat actors tend to look for more vulnerable targets." — Joint Cybersecurity Advisory