The US Justice Department says the operation targets internet domains allegedly used to scan networks and support cyberattacks against critical infrastructure.

The United States has seized seven internet domains suspected of supporting cyberattacks against critical infrastructure, targeting digital infrastructure allegedly linked to hackers associated with Chinese technology company Integrity Technology Group, the US Department of Justice announced Thursday.

According to the department, the domains were allegedly used to scan computer networks and identify potential targets for cyber intrusions. The operation aims to disrupt the online infrastructure suspected of supporting these activities in the United States and other countries.

The latest action marks the second publicly announced US operation targeting hacking infrastructure associated with Integrity Technology Group. It follows a court-authorized operation in September 2024 against a botnet linked to the company.

US authorities reported that the earlier network involved more than 250,000 compromised consumer devices in the United States and other parts of the world. Such devices can be remotely controlled and used to conduct cyberattacks, collect information or conceal malicious activity.

A botnet is a network of computers and internet-connected devices that have been compromised and placed under remote control. Cybercriminals and other malicious actors can exploit these networks to scan systems, gather intelligence or launch coordinated attacks.

Former FBI Director Christopher Wray previously linked Integrity Technology Group to a Chinese hacking operation known as Flax Typhoon. Wray said the group conducted intelligence-gathering and reconnaissance activities on behalf of Chinese security agencies.

The latest operation reflects continuing US efforts to counter cyber threats targeting critical infrastructure. These systems include digital networks and services that support essential sectors, such as communications, energy and other public services.

Cyberattacks against such infrastructure can pose risks to the availability, security and reliability of services on which governments, businesses and the public depend. Disrupting the infrastructure used by suspected hackers is one way authorities seek to limit their ability to identify and target potential victims.

However, the Justice Department’s announcement, as described in the available information, did not identify the seven domains or provide a detailed account of the suspected hacking activities. The full scope of the operation and its impact on the alleged cyber network were also not disclosed.