US neutralizes Russian army 'botnet'

2022-04-07 20:30:12Kosova&Bota SHKRUAR NGA REDAKSIA VOX

US neutralizes Russian army 'botnet'

The U.S. Department of Justice announced that it neutralized Cyclops Blink, a modular botnet controlled by an app known as Sandworm, after which the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federation allegedly stands.

"The operation copied and removed malts from internet-related censorable devices that Sandworm used for the command and control of the underlying botnet," the Justice Department said in a statement Wednesday.

In addition to cutting off its infrastructure, the operation also closed the external management gates the threat actor used to create links to infected devices, effectively disconnecting contact and preventing the hacker group from using infected equipment to command botnets.

The outage authorized by the Cyclops Blink court on March 22 comes just over a month after intelligence agencies in Great Britain and the US described the botnet as a replacement framework for the MOUNTAINFilter that was exposed and neutralized in May 2018.

Blink Cyclops, which is believed to have appeared since June 2019, mainly targeted protective equipment 'Firewall', WatchGuard and ASUS routers, with the Sandworm group exploiting a security censorship previously identified in WatchGuard's Firebox firmware as an initial access vector.

A subsequent analysis by cybersecurity firm Trend Micro last month suggested the possibility that the botnet is an attempt to "build an infrastructure for further attacks on higher value targets".


Video