The FBI has cracked down on a vast botnet operation linked to a Chinese hacking group, the attackers targeted government agencies, universities, and other entities in the US.
The Five Eyes intelligence alliance issued a joint report alerting organizations to take safety measures after finding the botnet was used to deploy DDoS attacks and compromise organizations in the US.
(PDF)
@ecksmc
Should have sent StuxNet to China instead of Iran... Sigh...
Flax Typhoon group disguises itself as an information security company but has a long history of working with close links to the Chinese government
https://www.cysecurity.news/2024/09/china-linked-apt-raptor-train-botnet.html
According to a Microsoft report from 2023, Flax Typhoon has been in the game since 2021
https://www.microsoft.com/en-us/security/blog/2023/08/24/flax-typhoon-using-legitimate-software-to-quietly-access-taiwanese-organizations/