FBI confirms it issued remote kill command to blow out Volt Typhoon's botnet

U.S. authorities say a China-linked APT known as Volt Typhoon deployed the KV Botnet on hundreds of out-of-date Cisco and Netgear SOHO routers in the United States to establish encrypted remote control and pre-position access to communications, energy, transportation, and water sectors; the FBI obtained warrants to infiltrate the botnet, collect non-content node data, and remotely remove the malware, while CISA and the FBI issued an alert urging vendors to fix SOHO router management-interface defects.