FBI Takes Down Flax Typhoon: Major Win Against China's Critical Infrastructure Campaign
In October 2024, the FBI and Department of Justice disrupted the China-linked advanced persistent threat group Flax Typhoon by seizing seven domains used to scan and infiltrate U.S. critical infrastructure. The operation blocked access to command and control platforms that the threat actors had been using to maintain persistent access to compromised systems across energy, telecommunications, and transportation sectors. This coordinated law enforcement action represents a significant disruption to an ongoing espionage campaign targeting critical infrastructure organizations. The Flax Typhoon campaign highlights the increasing focus of state-sponsored actors on critical infrastructure targets and demonstrates the growing collaboration between cybersecurity agencies and law enforcement to proactively disrupt threat operations before they can cause significant damage.
Kill Chain
