Hundreds of routers have been disabled in the US in an effort to take down a cyber espionage campaign conducted by Volt Typhoon, a hacking group associated with the Chinese government.
The US Justice Department (DoJ) announced on January 31, 2024, that the FBI led a law enforcement operation in December 2023 to disrupt a network of hundreds of connected devices.
These devices, commonly known as small office/home office (SOHO) routers, had been hijacked by the Volt Typhoon advanced persistent threat (APT) group, who then infected them with the KV Botnet malware.
Volt Typhoon Used Obsolete Cisco and NetGear Routers
The DoJ revealed that most routers that were part of the Volt Typhoon hacking network were Cisco and NetGear routers.
These routers were vulnerable because they had reached end-of-life status, meaning they were no longer supported through their manufacturer’s security patches or other software updates.
No tags.
