Volt Typhoon rebuilds malware botnet following FBI disruption

FanJ · Nov 15, 2024

Volt Typhoon rebuilds malware botnet following FBI disruption
Bleeping Computer - November 12, 2024
https://www.bleepingcomputer.com/ne...ilds-malware-botnet-following-fbi-disruption/

First of all before doing some quoting: this is a follow-up of the thread:
FBI issues dramatic public warning: Chinese hackers are preparing to 'wreak havoc' on the US
https://www.wilderssecurity.com/thr...re-preparing-to-wreak-havoc-on-the-us.453453/

OK, now some quotes from that recent Bleeping Computer article:

The Chinese state-sponsored hacking group Volt Typhoon has begun to rebuild its "KV-Botnet" malware botnet after it was disrupted by law enforcement in January, according to researchers from SecurityScorecard.

Volt Typhoon is a Chinese state-sponsored cyberespionage threat group that is believed to have infiltrated critical U.S. infrastructure, among other networks worldwide, since at least five years ago.
Click to expand...

In January 2024, the U.S. authorities announced the disruption of Volt Typhoon's botnet, which involved wiping malware from infected routers.

Although Volt Typhoon's initial revival attempt in February failed, reports of the threat actors exploiting a zero-day vulnerability in August indicated that the threat group remained very much alive.
Click to expand...

SecurityScorecard reports that, since September, Volt Typhoon has returned through a new network of compromised devices primarily located in Asia.

The KV-Botnet, also dubbed 'JDYFJ Botnet' by SecurityScorecard due to the self-signed SSL certificate seen in the compromised devices, attempts to mainly compromise Cisco RV320/325 and Netgear ProSafe series devices.
Click to expand...

Read there more!!

Log in or Sign up

Volt Typhoon rebuilds malware botnet following FBI disruption

FanJ Updates Team

Log in or Sign up

Volt Typhoon rebuilds malware botnet following FBI disruption

FanJ Updates Team

Useful Searches