FYI: FBI disrupts Chinese cyber operation

[concord]

The hacking campaign known as Flax Typhoon installed malicious software on thousands of internet-connected devices,
including cameras, video recorders, and home and office routers, to create a massive botnet — a network of infected computers.

FBI disrupts Chinese cyber operation targeting critical infrastructure in the US

The FBI has disrupted a group of Chinese hackers who were working at the direction of the Chinese government to infiltrate critical infrastructure in the U.S. and other countries and to spy on and steal data from universities, government agencies and others, Director Chris Wray said Wednesday...

finance.yahoo.com

 

[Teken]

Like many other so called news articles it provides zero insight as to the make, model, firmware this malware affected?!?

I mean it’s not like the general public wouldn’t want to know something they have in place is / has been compromised!

They give no insight as to how they detected this malware nor any information as to how to remedy the problem?!?

The only thing this article affirms is in 2024 nobody in Government, Education, and Enterprise are remotely serious about security!

You literally have mission critical infrastructure open to the Internet??? It’s not like there hasn’t been thousands of stories of high profile hacks / ransom ware!

Just zero hope for these people . . .

 

[concord]

Very true, too generic. I looked at CISA.gov and I don't see it listed either, only the Volt Typhoon.

Forget who I used to get alerts from when our group had are own T1 line, with Cisco router, firewall, etc. for our web server. Was vigilant in keeping them updated. Around 2009, our corporate T3 network got hacked, then they got serious about security, ramped up an INFOSEC group and I finally moved our web server to the company T3 network, and virtualized them...left security to them .

 

[Gimmons]

“The FBI and Justice Department, which obtained a warrant to seize the botnet's infrastructure…”

Am I more or less concerned knowing that the FBI now owns the botnet instead of the Chinese?

 

[elvisimprsntr]

Here is a more detailed description posted on Bleeping Computer September 18, 2024, including the list of manufacturers affected.

Chinese botnet infects 260,000 SOHO routers, IP cameras with malware

The FBI and cybersecurity researchers have disrupted a massive Chinese botnet called "Raptor Train" that infected over 260,000 networking devices to target critical infrastructure in the US and in other countries.

www.bleepingcomputer.com

 

[Teken]

Here is a more detailed description posted on Bleeping Computer September 18, 2024, including the list of manufacturers affected.

Chinese botnet infects 260,000 SOHO routers, IP cameras with malware

The FBI and cybersecurity researchers have disrupted a massive Chinese botnet called "Raptor Train" that infected over 260,000 networking devices to target critical infrastructure in the US and in other countries.

www.bleepingcomputer.com

Excellent read thanks for the reference link!