FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

The FBI and Department of Justice announced the disruption of malicious tools used by Flax Typhoon, a China-linked advanced persistent threat (APT) group. As part of the operation, authorities seized seven domains and blocked access to platforms used by the threat actor. These platforms were leveraged to scan and in some cases infiltrate U.S. critical infrastructure. The action represents a significant law enforcement effort against Chinese state-sponsored cyber espionage targeting American infrastructure. Flax Typhoon is a well-documented APT group known for targeting government, defense, and critical infrastructure sectors. The seizure of domains is intended to disrupt the group's operational capabilities and command-and-control infrastructure.