US is Shutting Down Chinese Botnet Volt Typhoon

 The U.S. Justice Department has successfully disrupted a botnet operated by the Chinese hacking group known as Volt Typhoon. The botnet takedown was authorized by a U.S. court and involved remotely disabling tools implanted by Chinese hackers. The operation targeted the KV Botnet malware, which was used by Volt Typhoon to infect privately owned home and office routers. The group aimed to conceal its hacking activities, including targeting critical infrastructure. 

The botnet's takedown is linked to advisories released by U.S. agencies and cybersecurity firms throughout 2023, highlighting concerns about destructive Chinese hacking campaigns. Volt Typhoon, associated with BRONZE SILHOETTE and TAG-87, has targeted U.S. critical infrastructure and exploited vulnerabilities in end-of-life Cisco routers. The Justice Department emphasized its commitment to dismantling cyber operations that undermine the security of the American people, especially those sponsored by foreign governments. The campaign is believed to be connected to potential preparations around a Taiwan invasion, intending to slow down the U.S. deployment of forces. 

FBI Director Christopher Wray stated that Chinese hackers are pre-positioning to cause real-world harm to American citizens and communities, posing a potential threat to critical infrastructure. The botnet mainly targeted routers from popular brands Cisco and NetGear, focusing on those that had reached end-of-life status, making them vulnerable due to lack of manufacturer support. The FBI urged Americans to replace routers after their end-of-life expiration to protect personal cybersecurity. The operation involved temporarily removing the routers from the botnet, and owners can reverse the process by restarting the router. The FBI has notified infected router owners or their internet service providers about the operation. The disruption comes amid increasing concerns about state-sponsored cyber threats and the need for proactive measures to safeguard critical infrastructure.