Chinese Cyber Actors Exploit Vulnerabilities via Integrity Technology Group

Chinese government-linked cyber actors tied to Integrity Technology Group are exploiting CVE-2015-5477 and CVE-2023-22894 and using tools such as MicroScan and EBurst, along with techniques like cross-site scripting and password spraying, to gain access, maintain persistence, and exfiltrate sensitive data from critical sectors (government, healthcare, IT); a joint U.S./UK/allies alert urges organizations to apply patches, disable unused services, and enable multifactor authentication.