More sanctions have been dealt by the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC), this time against Beijing-based cybersecurity company Integrity Technology Group, also known as Yongxin Zhicheng, for its involvement in cyberattacks orchestrated by the Chinese state-sponsored hacking group Flax Typhoon. Operating since at least mid-2021, Flax Typhoon has targeted various entities across North America, Europe, Africa, and Asia, leveraging known vulnerabilities and using legitimate remote access software to maintain persistent access to victims’ systems. Integrity Tech provided infrastructure support for Flax Typhoon’s cyber campaigns from mid-2022 to late-2023, facilitating attacks against critical infrastructure, including government agencies, universities, telecommunications providers, and media organizations in the U.S. and overseas. The group used a botnet called Raptor Train, which infected over 260,000 devices, to conduct DDoS attacks and as a proxy for stealthy operations against military, government, and IT sectors, primarily in the U.S. and Taiwan. The sanctions freeze all U.S. assets of Integrity Tech and prohibit U.S. organizations and citizens from conducting transactions with the company. The sanctions follow a series of coordinated actions by U.S. agencies, including the disruption of the Raptor Train botnet and advisories on tactics used by Flax Typhoon.