FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

### Executive Summary U.S. authorities disrupted infrastructure operated by China-linked APT 'Flax Typhoon' / Integrity Technology Group, seizing domains and citing a Mirai-variant IoT botnet (Raptor Train) used with reconnaissance and exploitation tools (Microscan, FishHub) to scan, infiltrate, and exfiltrate from critical infrastructure and other targets worldwide; FBI/DoJ filings include victim counts (records for 1.2M infected devices, ~260k actively infected as of June 2024), lists of seized domains, and descriptions of the actors' tooling and techniques.