FBI Disrupts Massive Chinese Botnet Infecting Over 260,000 Devices

The botnet, controlled by PRC state-sponsored hackers, targeted critical infrastructure in the US and other nations.

The FBI, in collaboration with international partners, dismantled a botnet operated by Chinese hackers known as Flax Typhoon.
The botnet, named 'Raptor Train,' infected over 260,000 devices including routers, IP cameras, and NAS devices.
Raptor Train was used to target entities in sectors such as military, government, and telecommunications, primarily in the US and Taiwan.
The FBI executed court-authorized operations to take control of the botnet infrastructure, issuing commands to remove the malware.
The botnet was managed by Integrity Technology Group, a Beijing-based company, and had been active since May 2020.