FBI Seizes Infrastructure Behind Chinese State-Backed Botnet Targeting US Government Agencies
The U.S. government has taken steps to dismantle a Chinese-backed botnet that was used to compromise multiple federal agencies and critical infrastructure. The operation, confirmed by the Department of Justice, targeted organizations including NASA, the Federal Reserve, the U.S. Senate, and the Justice Department.
The FBI seized domains that served as command-and-control infrastructure for the botnet, which had been operating as proxy tools to obfuscate the origins of the hacking campaign. This type of infrastructure allows threat actors to route their attacks through compromised devices, making attribution more difficult and evading traditional security measures.
The seized domains will now redirect traffic intended for the botnet to servers under FBI control, effectively severing the hackers' ability to communicate with and manage their infected devices. This action represents an ongoing effort by U.S. authorities to counter state-sponsored cyber operations targeting government institutions and critical infrastructure.
The case highlights the persistent threat posed by Chinese state-affiliated hacking groups to U.S. government networks and the challenges of defending against sophisticated, well-resourced adversaries.