The PolySwarm Blog

Verticals Targeted: Government, Healthcare, Manufacturing, Information Technology, Law Enforcement, Education, Religious Organizations
Regions Targeted: North America, Southeast Asia, Africa
Related Threat Actors: Flax Typhoon

Executive Summary

Chinese government-linked threat actors enabled by Integrity Technology Group (Integrity Tech) combine automated vulnerability scanning and hands-on exploitation to compromise organizations worldwide. The actors target multiple sectors, including healthcare and US critical infrastructure, using credential attacks, persistent VPN connections, and specialized tools to collect sensitive information. The activity highlights the risks posed by exposed services, compromised identities, and unauthorized access to organizational email environments.