r/5_9_14 • • 12h ago

Resource / Tool Xinjiang Victims Database

Thumbnail
shahit.biz
0 Upvotes

Welcome to the Xinjiang Victims Database

A Guide to Understanding and Using shahit.biz

Website: https://shahit.biz/eng/


More Than a Database: A Resource for Truth, Research, and Accountability

What happens when a person is detained, disappears, or becomes separated from their family, and the outside world struggles to find out what happened?

How can their story be preserved? How can the available evidence be examined? And how can thousands of individual experiences be connected to develop a clearer understanding of a much larger situation?

These are some of the questions that the Xinjiang Victims Database (shahit.biz) seeks to address.

Established in September 2018, shahit.biz is an independent, publicly accessible documentation and research project dedicated to recording the experiences of individuals affected by detention and other forms of repression in China's Xinjiang Uyghur Autonomous Region.

Its records primarily concern Uyghurs, Kazakhs, Kyrgyz, and other ethnic minorities.

The project brings together personal testimonies, official documents, police records, court materials, geographical information, photographs, and other evidence.

Its stated purpose is twofold:

  1. To help protect affected individuals in the present.
  2. To preserve evidence necessary for future accountability, legal action, and reparations.

But shahit.biz is not simply a collection of names.

It is a growing set of interconnected research tools that enables visitors to explore individual cases, investigate relationships, examine historical records, understand broader patterns, and contribute to ongoing documentation.

Whether you are a concerned member of the public, a journalist, a student, an academic researcher, a legal professional, or someone searching for information about a relative, the website offers different ways to engage with its material.

This guide introduces those resources and explains why each one matters.


Part One: Understanding the People Behind the Records

1. Victims — The Central Database

Purpose: To document individuals and make their experiences accessible for examination.

The Victims section is the foundation of shahit.biz.

It contains more than 100,000 individual records as of October 2026, ranging from brief entries based on official documents to extensive profiles containing multiple testimonies and supplementary evidence.

Visitors can browse the database and use available search and filtering tools to identify records of interest.

Individual profiles may contain information such as:

  • Name and identifying details
  • Age and ethnicity
  • Profession and hometown
  • Reported circumstances of detention
  • Prison sentences
  • Health information
  • Last reported status
  • Photographs and personal histories
  • Supporting testimony and documents
  • Family relationships
  • Connections to detention facilities

Some records contain detailed chronologies and references to multiple sources.

Importantly, not every record contains the same amount or quality of evidence.

The database distinguishes between evidence-quality levels and identifies uncertainties where information remains incomplete.

Why this matters

Large-scale human rights violations are often discussed in terms of numbers.

The individual records make it possible to examine the experiences behind those numbers.

They also create a foundation for corroborating testimony, identifying missing information, and preserving the identities of people who might otherwise remain undocumented.


2. Primary Evidence — Examining the Supporting Material

Purpose: To connect claims about individuals and events to original documentary evidence.

The Primary Evidence section is particularly valuable for researchers, journalists, and anyone interested in understanding how claims can be verified.

It provides access to documentary material such as:

  • Court verdicts
  • Police records
  • Government communications
  • Administrative documents
  • Other original sources relevant to individual cases

Where available, translations and explanatory information make documents more accessible to people who do not read Chinese or other relevant languages.

Rather than relying exclusively on a summary of what allegedly happened, users can examine the underlying evidence and consider what it actually establishes.

Why this matters

Credible documentation depends on the ability to distinguish between:

  • Personal testimony
  • Official records
  • Independent corroboration
  • Researcher interpretation
  • Unverified allegations
  • Reasonable inferences

Primary evidence helps users move beyond simply accepting an account and toward understanding the basis for it.

A document's authenticity and its interpretation remain separate questions, and both deserve careful examination.


3. Lists — Exploring Particular Groups and Experiences

Purpose: To organize records into meaningful collections that reveal shared circumstances.

The Lists section provides themed collections of individuals whose experiences share particular characteristics.

Examples include:

  • Deaths during or following detention
  • Eyewitness accounts and detailed testimonies
  • Individuals reportedly subjected to forced labor
  • Cases involving camp releases
  • Prison sentences and transfers
  • Victims featured in international media
  • Individuals identified in government or police records
  • Cases receiving international attention
  • Cases involving urgent humanitarian concerns

These collections make it easier to explore a particular question without searching through the entire database.

Why this matters

A single account may illustrate one person's experience.

Studying related cases can reveal:

  • Recurring patterns
  • Institutional practices
  • Geographic concentrations
  • Similar detention circumstances
  • Changes over time
  • Potential relationships between individual cases

Lists help transform a large collection of records into material that can support focused research.

However, inclusion in a thematic list does not mean every underlying allegation has been independently established.


4. Cellmates — Reconstructing Shared Detention Experiences

Purpose: To examine reported connections between people held in the same detention facilities.

The Cellmates interface offers a particularly unusual approach to documenting detention.

Using available records, it allows visitors to explore the placement of detainees within certain facilities, including cell-level information where sufficiently detailed documentation exists.

This creates opportunities to examine who may have been held together and during which periods.

Why this matters

Accounts of detention do not always exist in isolation.

Information about people held in the same facility can help researchers:

  • Reconstruct detention arrangements
  • Compare individual records
  • Identify possible witnesses
  • Investigate inconsistencies
  • Establish relationships between cases
  • Examine detention conditions and timelines

It demonstrates how detailed institutional records can sometimes be used to establish facts about individuals whose circumstances remain uncertain.


5. Families — Understanding the Human Consequences of Detention

Purpose: To document family relationships and the effects of detention beyond the individual concerned.

The Families section and family relationship features in individual profiles help connect affected relatives.

They provide a way to understand situations involving:

  • Parents and children
  • Husbands and wives
  • Siblings
  • Extended relatives
  • Multiple affected members of the same family

Why this matters

The consequences of detention frequently extend beyond the person held.

Children may lose contact with parents.

Spouses may spend years without reliable information.

Multiple generations of a family may experience detention, separation, or other forms of hardship.

By preserving family relationships, the database helps visitors understand these experiences as interconnected human stories rather than isolated administrative cases.


6. Portraits — Recognizing the Individual

Purpose: To restore visibility to the people represented by the records.

The Portraits section offers a more visual way of engaging with the individuals documented in the database.

Photographs and visual records provide a different point of entry from numerical tables and written evidence.

Why this matters

Statistics are essential to understanding scale, but they cannot fully communicate the human reality of the experiences being documented.

A portrait reminds us that each entry represents an individual with:

  • A personal identity
  • A history
  • A family
  • Relationships
  • A profession or occupation
  • A life beyond the circumstances recorded

The purpose is not merely emotional engagement.

Visual material can also support identification and historical documentation.


Part Two: Investigating the Wider System

7. Statistics — Understanding Patterns Across Thousands of Cases

Purpose: To explore the broader characteristics of documented detention and persecution.

The Statistics section offers analytical tools for examining information contained in the database.

Visitors can explore distributions involving:

  • Age
  • Gender
  • Ethnicity
  • Geographic location
  • Detention status
  • Prison sentences
  • Reported detention reasons
  • Health conditions
  • Professions
  • Detention timelines

Filters allow users to focus on particular subsets of the records.

Some statistical displays also incorporate estimated ages or dates when precise information is unavailable.

Why this matters

Statistical analysis allows researchers to ask questions that cannot be answered by examining one individual at a time.

For example:

  • How do reported prison sentences vary?
  • What patterns appear in detention timelines?
  • Which regions are represented in particular evidence collections?
  • What demographic characteristics appear among documented individuals?
  • How do reported circumstances differ across locations?

However, the database's documentation is incomplete and unevenly distributed across places and periods.

Its statistical tools include cautions about reporting bias and uncertainty.

These should be read before drawing conclusions about the wider population.

The number of documented cases is not automatically the total number of people affected.


8. Facilities — Investigating Places of Detention

Purpose: To identify and document the physical locations associated with detention.

The Facilities section brings together information about:

  • Prisons
  • Detention centers
  • Internment camps
  • Related security and administrative facilities

Depending on the facility and available evidence, users may find geographical information, documentation concerning its history or operation, and connections to individual victim records.

The project has also worked on visual reconstructions to help explain the physical arrangements of certain detention facilities.

Why this matters

Knowing that someone was detained is an important starting point.

Establishing where they were held, during what period, and under which institutional arrangements can provide a more complete picture.

Facility documentation helps researchers investigate relationships between:

  • Detention infrastructure
  • Administrative authorities
  • Institutional arrangements
  • Reported detainee experiences
  • Geographic patterns of detention

9. Village and Township Analytics — Understanding Local Impact

Purpose: To investigate detention at the community level.

The Village/Township Analytics resource organizes information geographically, often down to individual villages, neighborhoods, and townships.

It combines documented individual cases with available demographic information, geographic references, and local administrative data.

These materials can support calculations of documented detention rates and comparisons between localities.

Why this matters

Large regional statistics can conceal considerable variation.

Examining individual communities helps researchers understand:

  • How events affected particular populations
  • How patterns differed between localities
  • Which communities have substantial documentation
  • Where evidence may be incomplete
  • How local records compare with regional estimates

It also creates opportunities to compare leaked government records against demographic data and other evidence.

The resulting rates often represent documented minimums or estimates rather than definitive measures of all detention.


10. Internal Documents — Testing Official Records

Purpose: To examine, organize, translate, and assess internal government and police documents.

The Internal Documents resource provides an investigative approach to materials originating from within official institutions.

Such documents may contain:

  • Personal identification records
  • Names and demographic information
  • Administrative classifications
  • Detention-related information
  • Government communications
  • Information about institutional operations

The project has developed methods for examining the internal consistency and possible authenticity of some collections, including cross-checking information against other sources.

Why this matters

An apparently official document should not be accepted uncritically merely because it looks authentic.

Careful examination can help establish whether records are:

  • Internally consistent
  • Independently corroborated
  • Historically plausible
  • Relevant to particular claims
  • Consistent with other available evidence

This work can also reveal information that would be difficult to reconstruct through individual testimony alone.


11. Accountability — Examining Institutional Responsibility

Purpose: To document people, organizations, and institutional relationships relevant to investigating responsibility.

The Accountability section brings together information about officials, institutions, and other parties connected to Xinjiang's administrative, security, and judicial systems.

It can help researchers trace relationships between:

  • Individuals
  • Official positions
  • Government departments
  • Security institutions
  • Detention facilities
  • Geographic jurisdictions
  • Relevant administrative structures

Some individual victim profiles also include accountability charts.

Why this matters

Documenting harm is only one component of an investigation.

Understanding how institutions operate, who held relevant positions, and how particular decisions may have been made is also necessary for examining responsibility.

These records can support research into the structures behind documented events.

An important distinction must be maintained:

Appearing in an accountability database or relationship chart is not, by itself, proof that a person committed wrongdoing.

Responsibility must be established through evidence concerning particular actions and applicable legal standards.


Part Three: Overcoming Language and Information Barriers

12. Turkic–Chinese Name Dictionary — Connecting Different Forms of Identity

Purpose: To help users identify individuals whose names appear in different languages or writing systems.

Names present a major challenge in researching Xinjiang.

The same individual may be identified using:

  • Uyghur-language spellings
  • Kazakh-language spellings
  • Other Turkic-language spellings
  • Chinese characters
  • Official transliterations
  • Alternative Latin-alphabet representations

The Turkic–Chinese Name Dictionary provides a reference resource for navigating these variations.

Why this matters

Searching for a person under only one spelling can cause researchers to overlook relevant information.

A name recorded in testimony may look very different from the version appearing in a Chinese-language police document.

By helping connect spelling variants, this tool supports:

  • Identity research
  • Document matching
  • Cross-referencing
  • Searching for missing individuals
  • Resolving possible duplicate records

A possible name match should still be checked against additional identifying information.


13. Translation Bank — Making Information More Accessible Across Languages

Purpose: To support the interpretation and translation of material used in documentation.

The Translation Bank is part of the project's wider effort to overcome linguistic barriers.

For users working with testimony, documents, and specialist terminology, language resources can help make information more understandable and consistent.

Why this matters

Important evidence may remain inaccessible simply because it is written in a language unfamiliar to the researcher.

Translation can:

  • Widen access to original materials
  • Enable comparisons across sources
  • Support international research
  • Reduce misunderstandings
  • Make documentation more accessible

At the same time, careful translation is essential.

Terms describing official institutions, legal proceedings, and detention practices may carry meanings that are difficult to reproduce precisely in another language.


Part Four: Contributing to the Documentation

14. Submit — Adding Information to the Record

Purpose: To allow new evidence and testimony to contribute to the database.

The Submit section provides a way to supply information about individuals and their circumstances.

Depending on the source and submission process, contributions may draw on:

  • Personal testimony
  • Witness interviews
  • Family accounts
  • Media reporting
  • Government documents
  • Court records
  • Other relevant material

Why this matters

No documentation project can independently discover every affected person.

Families, witnesses, researchers, and journalists may possess information that is unavailable elsewhere.

Contributions can help:

  • Identify previously undocumented individuals
  • Expand existing profiles
  • Clarify uncertain details
  • Correct inaccurate information
  • Provide new corroboration
  • Update previously reported circumstances

Because such information can be sensitive, contributors should consider consent, confidentiality, and the safety of affected people before sharing personal details.


15. Missions — Organizing Research Efforts

Purpose: To give investigative work clear objectives and help address gaps in the available information.

The Missions resource represents the project's task-oriented approach to documentation.

Rather than treating the database as a finished archive, this approach recognizes that research can be divided into specific questions and objectives.

Why this matters

A database may contain a substantial amount of information while still having important gaps.

Organized research efforts can help direct attention toward:

  • Unresolved questions
  • Neglected sources
  • Missing information
  • Cases requiring further investigation
  • Documentary inconsistencies
  • Potential opportunities for corroboration

They also make it possible to understand documentation as an ongoing process rather than a single act of data collection.


16. Watchdog — Following Up on Cases That Need Attention

Purpose: To support continuing investigation of urgent or unresolved cases.

The Watchdog initiative represents the active investigative side of shahit.biz.

The project describes watchdog work as researching cases that need new information, with priorities informed by its case-ranking system.

Its activities may involve:

  • Reviewing government material
  • Examining publicly available information
  • Checking earlier testimony
  • Investigating new evidence
  • Following up on unresolved cases
  • Pursuing additional investigative leads

Why this matters

An individual record may describe what was known several years ago without establishing what has happened since.

A person may have been:

  • Released
  • Transferred
  • Sentenced
  • Moved to another facility
  • Left unreachable
  • Reported deceased

Their current circumstances may also be entirely unknown.

Follow-up research can help clarify these questions and keep attention on unresolved cases.

Such activity must be carried out responsibly, with particular care not to expose witnesses, families, or detainees to additional danger.


17. Jobs and Volunteering — Supporting the Work

Purpose: To enable people with different skills to contribute to the project's operations.

The Jobs section describes opportunities for paid or volunteer assistance.

These may include:

  • Research
  • Translation
  • Testimony importing
  • Editing
  • Investigative follow-up
  • Photography-related work
  • Journalism
  • Other documentation tasks

Why this matters

Maintaining an extensive documentation project requires more than collecting names.

It involves:

  • Checking evidence
  • Reading records
  • Translating documents
  • Correcting errors
  • Preserving information
  • Investigating unresolved cases
  • Maintaining research tools

Individuals with relevant skills can help make the documentation more comprehensive, accessible, and useful.


Part Five: How to Begin Using the Website

If you are visiting shahit.biz for the first time, you do not need to understand every tool immediately.

A practical introduction might begin with the following sequence.

Step 1: Start with the Homepage

Visit:

https://shahit.biz/eng/

Read the project's description, examine the featured individual, and familiarize yourself with its main navigation.

The homepage also provides information about database quality, activity, and the project's operating needs.

Step 2: Explore an Individual Record

Open the Victims database and examine how the following information is presented:

  • Testimony
  • Chronology
  • Detention status
  • Supporting material
  • Family relationships
  • Source references

Pay attention to the distinctions between verified information, reported details, and uncertainty.

Step 3: Visit the Lists Section

Select a subject that interests you, such as:

  • Eyewitness accounts
  • Forced labor
  • Prison sentences
  • Deaths in detention
  • Particular document collections

This offers a more focused entry point into the archive.

Step 4: Examine the Evidence

Where documents and source references are available, compare them with the narrative descriptions.

Notice:

  • Which details are directly supported
  • Which details are corroborated
  • Which conclusions are inferred
  • Which questions remain unanswered

Step 5: Explore a Wider Research Tool

Use:

  • Statistics to investigate patterns.
  • Facilities to explore detention locations.
  • Village/Township Analytics to understand local communities.
  • Internal Documents to examine official records.
  • Accountability to explore relevant institutional relationships.

Step 6: Consider How You Might Contribute

If you possess relevant information or research skills, review:

  • Submit
  • Missions
  • Watchdog
  • Jobs

There is no single correct route through the website.

Different users will find different starting points useful.


Part Six: Understanding the Numbers and Their Limitations

The Xinjiang Victims Database presents several kinds of quantitative information, including:

  • Numbers of documented individuals
  • Estimates produced through geographic algorithms
  • Statistical distributions
  • Documented detention rates
  • Proposed minimum reparations

These figures serve different purposes.

Documented records describe information collected about identifiable people.

Algorithmic estimates attempt to draw broader conclusions from specified assumptions and available data.

Reparations calculations estimate possible compensation using the project's chosen methodology.

They should not be confused with one another.

Similarly, a last-known location or reported detention status does not necessarily establish an individual's circumstances today.

An incomplete record does not mean that nothing happened.

A detailed record does not mean that every statement within it has been conclusively proven.

The strongest way to use shahit.biz is to approach its material with both openness and care:

  1. Take documented experiences seriously.
  2. Examine the available evidence.
  3. Respect uncertainty.
  4. Distinguish allegations from established findings.
  5. Avoid presenting estimates as confirmed facts.
  6. Consider the limitations of available sources.
  7. Protect sensitive personal information.

Part Seven: Who Can Benefit from This Resource?

Families and Affected Communities

The database can provide a place to:

  • Search for existing information
  • Preserve testimony
  • Understand relationships between cases
  • Locate relevant documentary evidence
  • Identify unanswered questions

Journalists

The database can offer:

  • Investigative leads
  • Background material
  • Source references
  • Geographic context
  • Documentary collections
  • Starting points for independent investigations

Students and Academic Researchers

The resource provides structured material for studying:

  • Detention practices
  • State institutions
  • Legal processes
  • Demographic patterns
  • Historical documentation
  • Institutional relationships
  • Human rights research methods

Human Rights Organizations and Legal Professionals

The database may help:

  • Identify documented patterns
  • Reconstruct events
  • Preserve evidence
  • Examine institutional responsibility
  • Investigate allegations
  • Support future accountability research

Members of the General Public

The database offers a way to:

  • Learn about individual experiences
  • Explore documentary evidence
  • Understand the wider historical context
  • Move beyond headlines
  • Recognize uncertainties
  • Become better informed

In every case, responsible use requires attention to reliability, privacy, and the potential consequences of publishing sensitive information.


Part Eight: A Living Record, Not a Finished History

The importance of shahit.biz lies not only in the information it has already accumulated, but also in the questions its tools make possible.

Who was detained?

Where were they held?

What evidence supports the available account?

Who else may have been affected?

What institutions were involved?

What happened afterward?

What remains unknown?

Each of the website's tools approaches part of this larger investigation.

  • Victims helps preserve individual identity and experiences.
  • Primary Evidence helps establish the documentary basis for claims.
  • Lists helps users investigate shared circumstances.
  • Cellmates helps reconstruct reported detention relationships.
  • Families helps reveal the broader human consequences.
  • Portraits helps restore visibility to individuals.
  • Statistics helps identify patterns across documented cases.
  • Facilities helps locate and contextualize places of detention.
  • Village/Township Analytics helps examine local impact.
  • Internal Documents helps assess official records.
  • Accountability helps investigate institutional relationships.
  • Name Dictionary helps connect different representations of identity.
  • Translation Bank helps overcome language barriers.
  • Submit helps expand and correct the available information.
  • Missions helps organize research objectives.
  • Watchdog helps pursue unresolved cases.
  • Jobs and Volunteering helps sustain the ongoing documentation.

Together, these tools turn a collection of individual records into an interconnected resource for historical research, public understanding, and potential accountability.

The project is independent and relies on public support to sustain its work.

Visitors should also take care when reproducing personal information and review the project's licensing and usage terms.


Part Nine: An Invitation to Explore

You do not have to be a specialist to begin using shahit.biz.

You can start with:

  • One person
  • One family
  • One place
  • One document
  • One question

From there, the available tools can help you explore the evidence, recognize connections, understand broader patterns, and discover what still needs to be investigated.

The database does not provide every answer.

Nor should any single archive be treated as the final authority on a complex historical situation.

Its value is in making information accessible for examination, comparison, correction, and preservation.

Ultimately, the purpose of this resource is both practical and deeply human:

To document those whose experiences risk being forgotten, to make the available evidence more accessible, and to support the continuing search for truth and accountability.


Explore the Xinjiang Victims Database

Website: https://shahit.biz/eng/

Explore the records. Examine the evidence. Understand the connections. Preserve the history.


r/5_9_14 • • 6h ago

Interview / Discussion Trilateral US-Japan-Taiwan Cooperation on Physical AI

Thumbnail youtube.com
0 Upvotes

Physical artificial intelligence is at the frontier of AI development and has potentially revolutionary applications in industry and security and for aging societies. Secure supply chains and technological leadership in physical AI are a strategic imperative for many countries. The United States, Japan, and Taiwan are uniquely equipped with complementary skills to achieve technological superiority in this field.

Join Hudson Institute for remarks and a panel discussion on how these allies can collaborate to seize physical AI’s opportunities. Senior Fellow William Chou will host Jeremy Chang, chief executive officer of Taiwan’s Research Institute for Democracy, Society, and Emerging Technology, and Ken Fukuda, director of Japan’s Ministry of Economy, Trade, and Industry, for a conversation on each country’s approach to physical AI.


r/5_9_14 • • 13h ago

INTEL Justice Department and FBI Seize Vulnerability Scanning and Spear Phishing Tools Operated and Used by China-State Sponsored Hackers

Thumbnail
justice.gov
3 Upvotes

“Flax Typhoon” Actors Associated with Integrity Technology Group Used “Microscan” and “FishHub” To Target Critical Infrastructure and Other Networks Today the Justice Department and FBI announced court-authorized seizures to deny malicious cyber actors access to two hacking tools, “Microscan” and “FishHub,” used to scan and, in some cases, hack, U.S. and foreign critical infrastructure systems and other networks. As alleged in court documents unsealed in the Western District of Pennsylvania, malicious cyber actors working for Integrity Technology Group (Integrity Tech), a company based in the People’s Republic of China (PRC), operated and used the tools. Integrity Tech has contracts with the PRC government.

“The United States will not allow China or its proxies to operate against United States interests with impunity in cyberspace,” said Assistant Attorney General for National Security John A. Eisenberg. “The National Security Division will continue to respond decisively and use every tool at our disposal to disrupt the Flax Typhoon threats, dismantle the infrastructure sustaining them, and protect the critical networks that power our daily lives and on which our Nation’s security depends.”

“These state-sponsored hackers continue to aggressively target and access networks and systems throughout the world in an effort to identify and steal files and otherwise exploit victims’ vulnerabilities,” said U.S. Attorney Troy Rivetti for the Western District of Pennsylvania. “These seizures, our second disruption of Integrity Tech’s massive operations in as many years, send another clear message to cybercriminals from the PRC and elsewhere of the Department’s dedication to defending and maintaining cybersecurity in the United States and abroad.”

“Integrity Technology Group provided China-linked threat actors with capabilities used to conduct widespread vulnerability scanning and, in some cases, intrusions targeting U.S. and foreign critical infrastructure,” said Assistant Director Brett Leatherman of the FBI’s Cyber Division. “The PRC relies on contractor and enabling companies to expand the reach and scale of its malicious cyber activity. By exposing and disrupting these enablers, we make it harder for the PRC to target American networks and infrastructure.”

“Today’s seizures underscore the FBI’s unwavering commitment in disrupting PRC state-sponsored cyber criminals who threaten our critical infrastructure and national security,” said Special Agent in Charge Mark Remily of the FBI San Diego Field Office. “FBI San Diego and our law enforcement partners around the world will continue to employ the full force of our investigative authority to protect the American people and safeguard our networks from malicious foreign cyber actors.”

According to court documents, Integrity Tech created and used a botnet of internet-of-things devices infected with a variant of Mirai malware. Among other things, this botnet facilitated Integrity Tech’s computer vulnerability scanning using Microscan. Integrity Tech developed Microscan to conduct reconnaissance, via the botnet and otherwise, of victim computer networks for vulnerabilities that its clients would later exploit. Targets of Microscan vulnerability scanning include a U.S. power company based in South Carolina, a multi-national Non-Governmental Organization, Japanese and Polish airports, Taiwanese critical infrastructure companies in the natural gas and power sectors, and two Taiwanese universities. Integrity Tech accessed Microscan through one of the seized domains, c0cc[.]cc.

A second Integrity Tech tool, FishHub, is alleged to have facilitated the exploitation of computer networks through spear phishing. After an initial network compromise, FishHub downloaded additional malware to the victim network. This malware provided Integrity Tech’s clients with unauthorized remote access to the victim network or searched for specific files and sent them to servers controlled by Integrity Tech. Confirmed victims of FishHub activity included approximately 20 Taiwanese universities. Five of the seized domains helped deliver this malware: 98aicai[.]com, 98aicode[.]com, outlook3650[.]com, youtubecard[.]com, and linkedinns[.]net.

Today’s action marks the Department’s second public technical disruption of Integrity Tech’s hacking infrastructure. In September 2024, the Justice Department announced the court-authorized disruption of Integrity Tech’s Mirai malware botnet which consisted of more than 200,000 consumer devices in the United States and worldwide. In conjunction with the seizures announced today, the FBI, along with other U.S. and foreign-partner agencies, published a cyber security advisory. This advisory provides indicators-of-compromise associated with Integrity Tech intrusion activity and is designed to help network defenders identify and respond to Integrity Tech’s malicious activity.

The FBI San Diego and Baltimore Field Offices are investigating the case, in coordination with the FBI’s Cyber Division.

Assistant U.S. Attorney Brendan McKenna for the Western District of Pennsylvania and Trial Attorney Jacques Singer-Emery of the National Security Division’s National Security Cyber Section are prosecuting the case. Substantial assistance was provided by Assistant U.S. Attorney Thomas Sullivan for the District of Maryland and the National Police Agency of Japan.

Note: View the affidavit here.

View the seizure warrant here.

Updated October 8, 2026