Chinese Agents Rebuild Botnets, Target US Infrastructure and AI Datacenter Debate
Chinese state-backed operatives, including Volt Typhoon, are reportedly rebuilding botnets using compromised routers and IoT devices, targeting US infrastructure and manipulating public discourse on AI datacenters. Following an FBI takedown in January 2024, one botnet cluster has surged to over 1,500 devices, actively scanning for vulnerabilities and posing a persistent threat.
Key points
- Chinese state-sponsored actors, including the group Volt Typhoon, are actively rebuilding botnets after a January 2024 FBI takedown.
- One identified botnet cluster, JDY, has resurged with over 1,500 compromised routers and IoT devices, actively scanning for network vulnerabilities.
- These operatives are also attempting to influence public opinion regarding the construction of datacenters for artificial intelligence.
- The activity demonstrates a rapid operationalization of reconnaissance data by China-nexus advanced persistent threat actors.
- The FBI had previously disrupted Volt Typhoon's KV-botnet, which used compromised devices for covert data transfer and network reconnaissance.
Multiple cybersecurity reports indicate a significant resurgence of botnet activity linked to Chinese government-backed operatives, including the group known as Volt Typhoon.
Following a successful takedown operation by the FBI in January 2024 that disrupted Volt Typhoon's KV-botnet, one segment of the network, identified as the JDY cluster, has reportedly grown to encompass more than 1,500 compromised routers and internet-connected devices. This cluster remains active, focusing on scanning for vulnerabilities in critical US networks shortly after they are publicly disclosed.
In addition to compromising infrastructure, these actors are reportedly attempting to manipulate public discourse and opinion surrounding the development and construction of datacenters essential for artificial intelligence advancements. Threat intelligence teams note that the rapid operationalization of reconnaissance findings underscores the persistent nature of these China-nexus advanced persistent threat (APT) campaigns.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.