Categories
Uncategorized

Justice Department bricks major Russian botnet operation

Justice Department press release: “A January 2024 court-authorized operation has neutralized a network of hundreds of small office/home office (SOHO) routers that GRU Military Unit 26165, also known as APT 28, Sofacy Group, Forest Blizzard, Pawn Storm, Fancy Bear, and Sednit, used to conceal and otherwise enable a variety of crimes. These crimes included vast spearphishing and similar credential harvesting campaigns against targets of intelligence interest to the Russian government, such as US and foreign governments and military, security, and corporate organizations. In recent months, allegations of Unit 26165 activity of this type has been the subject of a private sector cybersecurity advisory and a Ukrainian government warning.”

“This botnet was distinct from prior GRU and Russian Federal Security Service (FSB) malware networks disrupted by the Department in that the GRU did not create it from scratch. Instead, the GRU relied on the ‘Moobot’ malware, which is associated with a known criminal group.”

“Non-GRU cybercriminals installed the Moobot malware on Ubiquiti Edge OS routers that still used publicly known default administrator passwords. GRU hackers then used the Moobot malware to install their own bespoke scripts and files that repurposed the botnet, turning it into a global cyber espionage platform. The Department’s court-authorized operation leveraged the Moobot malware to copy and delete stolen and malicious data and files from compromised routers. Additionally, in order to neutralize the GRU’s access to the routers until victims can mitigate the compromise and reassert full control, the operation reversibly modified the routers’ firewall rules to block remote management access to the devices, and during the course of the operation, enabled temporary collection of non-content routing information that would expose GRU attempts to thwart the operation.”

Created by potrace 1.16, written by Peter Selinger 2001-2019

Elect a clown, get a circus

16 mins ago

“The only thing I could think of when I heard that Trump won was that my mom is coming home”: psycho Capitol rioter’s daughter

3 hours ago

Michiganders “protest” local Diary of Anne Frank performance

7 hours ago

Boaters forced to endure Disney cruise after catamaran sinks

9 hours ago

Britain devastated by deer outbreak

10 hours ago

Regular guest on Ancient Aliens lands exciting new job

13 hours ago

Climate change side effect to increase climate denialism: report

14 hours ago

Bangladeshis ask Interpol to arrest fugitive ex-dictator

15 hours ago

MAGA Latino says Trump won’t deport “family-oriented” illegals

24 hours ago

Kremlin says they expect their asset to earn his paycheck

1 day ago

Minnesota man kills sons, wife, ex and himself because Trump got elected again, the New York Post doesn’t report (but wanted to)

1 day ago

Wicked Barbie doll packaging points to porn site URL

1 day ago

Private prison company stock prices rise again

1 day ago

Nick Fuentes apparently confirms he pepper sprayed lib woman

2 days ago

Orange Tyrant to nominate Stefanik for US Ambassador to UN

2 days ago

Cuba hit with 6.8 magnitude quake after blackouts, hurricane

2 days ago

RHESUS MONKEY CRISIS UPDATE: One down, 42 to go

2 days ago

Daily Wire exposes massive FEMA worker safety conspiracy

3 days ago

Biden and Trump to meet Wednesday

3 days ago

Why does a Wendy’s Jr Bacon Cheeseburger still cost $3.99?

3 days ago

Wildfire breaks out in Brooklyn’s Prospect Park

4 days ago

Random thoughts Friday, Volume CXCIX

4 days ago

Armed man in body armor arrested near Florida Dem’s house

4 days ago

Zero escaped rhesus monkeys captured in South Carolina

4 days ago

Biden lifts ban on US military contractors working in Ukraine

4 days ago

MAGA Senator-Elect Jim Banks down with mass deportations

4 days ago

Quotation marks placed around “groceries”

4 days ago

FBI investigating racist threats texted to Black people

4 days ago

Try “forest bathing” for your post-election anxiety: CNN

4 days ago

Orange God Emperor promises retribution over $DJT sale rumors

4 days ago

US consumers set to lose up to $78 billion in spending power: study

5 days ago

Ghanaian president unveils golden statue honoring self

5 days ago

Private prison company’s stock price up 60 percent

5 days ago

Florida man killed while chasing cash on I-95 in Rhode Island

5 days ago

Experimental Boeing plane doesn’t malfunction during tests

5 days ago

Penguin gets lost, swims to Australia

5 days ago

Want to get away from it all? “Project Hyperion” may be for you!

5 days ago

Surprise! Trump’s “peace plan” is Ukrainian surrender

5 days ago

Rhesus monkeys escape from South Carolina testing lab

5 days ago

We have been derailed; we have not been defeated

5 days ago

WATCH LIVE: Biden addresses nation

5 days ago

Texas 2024 turnout flat from, maybe even below 2020’s

5 days ago

Mortgage rates increased this week

5 days ago

Half-empty or half-full

5 days ago

New trial ordered for Texas death row inmate over antisemitic judge

6 days ago

Oregon ambulance hits cyclist, sticks him with bill for ride

6 days ago

Someone should write an essay comparing Biden to Hindenburg

6 days ago

WATCH LIVE: Vice President Harris declares non-victory

6 days ago

Nigerian “prince” arrested for romance scams

6 days ago

Around 10 million 2020 Biden voters failed to show up

6 days ago

x
x
x
x
x
x