UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group

A joint US/UK allied advisory details tactics, techniques and procedures used by Integrity Technology Group — a sanctioned China-linked organization — linking it to prolific Beijing-backed groups and describing tools (MicroScan, EBurst, office-cli, SoftEther, etc.), exploitation methods (XSS, exploit scripts in Python/Go, password spraying), persistence and email exfiltration from on-premises and cloud services targeting governments, law enforcement, healthcare and religious organizations in Southeast Asia; the advisory provides IoCs, mitigations and notes domain seizures to disrupt operations.