EU Sanctions Chinese, Iranian Firms Supporting Hacking Operations

"Between 2022 and 2023, Flax Typhoon accessed at least 65 600 Internet of Things devices in six member states by using Integrity Technology Group's products. Integrity Tech has routinely provided threat actors with products used to compromise and access devices in EU member states."

"Anxun Information Technology has provided hacking services aimed at the critical infrastructure and critical functions of member states and third countries. The company has offered hacking-for-hire services, accessed and sold classified information, and has attacked governments of non-member states, posing a threat to the common foreign and security policy objectives of the Union."

The Council for the European Union announced sanctions against two Chinese companies and two associated individuals for their roles in hacking activities targeting EU member states. Integrity Technology Group supplied infrastructure to state-sponsored hacking group Flax Typhoon, which accessed over 65,600 Internet of Things devices across six EU member states between 2022 and 2023. Anxun Information Technology, linked to China's Ministry of Public Security, provided hacking-for-hire services targeting critical infrastructure and functions of member states and third countries, accessed and sold classified information, and attacked non-member state governments. The sanctions follow previous actions by the US and UK against these entities.

Read at SecurityWeek