FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Summary: The FBI and agencies in six other countries said on October 8 that hackers tied to Integrity Technology Group, a sanctioned Chinese cybersecurity company, stole email from government, law enforcement, healthcare, and religious organizations in Southeast Asia and elsewhere, breaking into networks since at least mid-January 2021. The advisory describes scanning with a tool holding more than 1,300 scripts, password spraying against Microsoft 365 and Exchange via EBurst, mailbox collection through EWS and office-cli, and a web application that provides third-party access to stolen email content.
Key Takeaway: The hackers built a portal that lets outside parties read stolen mailboxes by adding arguments to a URL, and the advisory does not identify who those third parties are - so a mailbox theft here is not a contained incident but a standing access channel others can query.
Read the original at The Hacker News ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026