US Justice Department Successfully Disrupts Chinese-Controlled Botnet Targeting Routers

US Justice Department Successfully Disrupts Chinese-Controlled Botnet Targeting Routers

In a recent development, the US Justice Department has confirmed its successful disruption of a botnet operated by a well-known Chinese government hacking group named Volt Typhoon. This revelation came to light on Tuesday when Reuters reported that the Justice Department, in collaboration with the FBI, obtained legal authorization from a US court to remotely disable tools implanted by Chinese government hackers over the past few months. The operation, authorized by a court order obtained in December, specifically targeted the Volt Typhoon group, which had strategically infected privately owned home and office routers with the "KV Botnet" malware.

FBI Director Christopher Wray, testifying before the House Select Committee on China, emphasized the significance of this operation, stating that while it was a crucial step, more collaborative efforts were needed to address ongoing cybersecurity challenges.

The Justice Department linked the botnet takedown to multiple advisories released in 2023 by US agencies and private sector cybersecurity firms. These advisories highlighted concerns about destructive Chinese government hacking campaigns targeting critical infrastructure in the United States.

Attorney General Merrick Garland emphasized the commitment to dismantle cyber operations, especially those sponsored by foreign governments, that pose a threat to the security of the American people. The campaign targeted routers from popular brands such as Cisco and NetGear, focusing on devices that had reached the "end of life" status, making them vulnerable due to lack of manufacturer support.

The operation, conducted in December following the court order, allowed the removal of the KV Botnet malware from compromised routers and severed their connection to the botnet. The FBI cautioned router owners to replace devices after reaching the end-of-life expiration to safeguard personal cybersecurity and national digital safety.

During a House hearing, FBI Chief Jen Easterly highlighted the difficulty in identifying Chinese hackers, as they can operate within a computer's operating system, mimicking system administrators. Congressional leaders commended the proactive action taken by the FBI, emphasizing the need for continued aggression against malicious actors.

While the Chinese government denied any involvement in the campaign, the FBI encouraged router manufacturers to adopt secure-by-design principles, emphasizing the importance of proactive measures to enhance router security.