A lot of Russians just went byebye - FBI Seizes Control of Russian Botnet

[UberNeuman]

The FBI operation targets a piece of sophisticated malware linked to the same Russian hacking group that hit the Democratic National Committee in 2016.

FBI agents armed with a court order have seized control of a key server in the Kremlin’s global botnet of 500,000 hacked routers, The Daily Beast has learned. The move positions the bureau to build a comprehensive list of victims of the attack, and short-circuits Moscow’s ability to reinfect its targets.

The FBI counter-operation goes after “VPN Filter,” a piece of sophisticated malware linked to the same Russian hacking group, known as Fancy Bear, that breached the Democratic National Committee and the Hillary Clinton campaign during the 2016 election. On Wednesday security researchers at Cisco and Symantec separately provided new details on the malware, which has turned up in 54 countries including the United States.

https://www.thedailybeast.com/exclu...medium=website&utm_content=link&ICID=ref_fark

-----------

well, how about that? http://dashboard.securingdemocracy.org/ has an overview of Twitter traffic and this is quite interesting since the seizing of that botnet:

 

[MixMasterTang]

Interesting but I don't think any "servers" were seized, but rather a domain name.

For those who want the TLDR:
"Kremlin’s global botnet of 500,000 hacked routers"
"“VPN Filter,” a piece of sophisticated malware linked to the same Russian hacking group"
"VPN Filter uses known vulnerabilities to infect home office routers made by Linksys, MikroTik, NETGEAR, and TP-Link"
..."an order directing the domain registration firm Verisign to hand the ToKnowAll[.]com address over to the FBI"
"The move effectively kills the malware’s ability to reactivate following a reboot"

 

[UberNeuman]

Interesting but I don't think any "servers" were seized, but rather a domain name.

For those who want the TLDR:
"Kremlin’s global botnet of 500,000 hacked routers"
"“VPN Filter,” a piece of sophisticated malware linked to the same Russian hacking group"
"VPN Filter uses known vulnerabilities to infect home office routers made by Linksys, MikroTik, NETGEAR, and TP-Link"
..."an order directing the domain registration firm Verisign to hand the ToKnowAll[.]com address over to the FBI"
"The move effectively kills the malware’s ability to reactivate following a reboot"

"FBI agents armed with a court order have seized control of a key server in the Kremlin’s global botnet of 500,000 hacked routers"

 

[trenchfoot]

Trump must be absolutely livid about this given how he despises our intelligence services.

 

[HomerJS]

witch hunt!

 

[Uhtrinity]

Trump must be absolutely livid about this given how he despises our intelligence services.

Take a look at his latest twitter post. Not as many supportive comments as usual. Not even close. Wonder what percentage of posts on his feed were bots.

https://twitter.com/realDonaldTrump/status/999454450854039552

 

[dank69]

The FBI operation targets a piece of sophisticated malware linked to the same Russian hacking group that hit the Democratic National Committee in 2016.

FBI agents armed with a court order have seized control of a key server in the Kremlin’s global botnet of 500,000 hacked routers, The Daily Beast has learned. The move positions the bureau to build a comprehensive list of victims of the attack, and short-circuits Moscow’s ability to reinfect its targets.

The FBI counter-operation goes after “VPN Filter,” a piece of sophisticated malware linked to the same Russian hacking group, known as Fancy Bear, that breached the Democratic National Committee and the Hillary Clinton campaign during the 2016 election. On Wednesday security researchers at Cisco and Symantec separately provided new details on the malware, which has turned up in 54 countries including the United States.

https://www.thedailybeast.com/exclu...medium=website&utm_content=link&ICID=ref_fark

-----------

well, how about that? http://dashboard.securingdemocracy.org/ has an overview of Twitter traffic and this is quite interesting since the seizing of that botnet:

Today is the 24th, the numbers are still rising. Up to 8000 already.

 

[feralkid]

Can we do it on this forum?