{"id":55218,"date":"2024-01-31T19:41:21","date_gmt":"2024-01-31T19:41:21","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/fbi-confirms-it-issued-remote-kill-command-to-blow-out-volt-typhoons-botnet\/"},"modified":"2024-01-31T19:41:21","modified_gmt":"2024-01-31T19:41:21","slug":"fbi-confirms-it-issued-remote-kill-command-to-blow-out-volt-typhoons-botnet","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/fbi-confirms-it-issued-remote-kill-command-to-blow-out-volt-typhoons-botnet\/","title":{"rendered":"FBI confirms it issued remote kill command to blow out Volt Typhoon’s botnet"},"content":{"rendered":"

China’s Volt Typhoon attackers used “hundreds” of outdated Cisco and NetGear routers infected with malware in an attempt to break into US critical infrastructure facilities, according to the Justice Department.<\/p>\n

On Tuesday news broke<\/a> that the Feds had blocked the malicious network that was set up on end-of-life, US-based small office\/home office routers. Now more details have come out about how an FBI team infiltrated the attack and harvested the key data before remotely wiping the KV Botnet, according to four warrants (5018<\/a>, 5530<\/a>, 5451<\/a> and 5432<\/a>) filed by the FBI in the Southern District Court of Texas last month and released today.<\/p>\n

“China’s hackers are targeting American civilian critical infrastructure, pre-positioning to cause real-world harm to American citizens and communities in the event of conflict,” FBI Director Christopher Wray said in a statement<\/a>. “Volt Typhoon malware enabled China to hide as they targeted our communications, energy, transportation, and water sectors.”<\/p>\n