The FBI has suppressed an attack by Chinese hackers Volt Typhoon group.
The concentrated attack focused on routers in an attempt to cripple Cisco and Netgear devices in small businesses and homes.
The court-authorized operation prevented reinfection of the routers and removed the malware that was deployed by the hackers.
”The United States will continue to dismantle malicious cyber operations – including those sponsored by foreign governments – that undermine the security of the American people,” said Attorney General Merrick B. Garland in a statement.
FBI’s Houston Field Office and Cyber Division, the U.S. Attorney’s Office for the Southern District of Texas and the National Security Cyber Section of the Justice Department’s National Security Division were responsible for the successful co-ordination and delivery of the operation.
FBI Director Christopher Wray said “Volt Typhoon malware enabled China to hide as they targeted our communications, energy, transportation, and water sectors. Their pre-positioning constitutes a potential real-world threat to our physical safety that the FBI is not going to tolerate.”
”We are going to continue to work with our partners to hit the PRC hard and early whenever we see them threaten Americans.” he concluded.
Disrupting the botnet
The Hackers targeted a vulnerability in old routers that were near the “end of their life” according to the U.S. Department of Justice.
The malware, known as “KV Botnet” had its ties severed by the co-ordinated response from the FBI.
Deputy Attorney General Lisa O. Monaco said that “in wiping out the KV Botnet from hundreds of routers nationwide, the Department of Justice is using all its tools to disrupt national security threats – in real-time.”
The operation did not alter or compromise the devices, nor was any data collected by the response to the Chinese hacker group.
The FBI has contacted the service providers of the Cisco and Netgear devices to inform them of the suppressed corruption of the devices.
In other cybersecurity infrastructure news earlier this month, the Biden Administration announced more robust measures for U.S. hospitals. The new requirements are set to fortify digital defenses in healthcare facilities.
The current administration has been dedicated to finding solutions to cybercrime and building bulwarks against invasive online criminals. Last year the White House laid the foundations of a national cybersecurity certification and labeling program.
Featured image: FBI
