FBI joint operation takes down massive Chinese botnet, Wray says

The FBI and allied partners executed a court-authorized takedown of a China-linked botnet known as Flax Typhoon (tracked by researchers as Raptor Train) that relied on Mirai-family malware to compromise over 260,000 routers and IoT devices worldwide (including an estimated 126,000 in the U.S.); the botnet facilitated large-scale scanning and exploitation campaigns (against targets such as government, military, telecoms, and critical infrastructure) and was managed via a tool called "Sparrow," with attribution tied to Integrity Technology Group and China Unicom IP addresses as detailed in Black Lotus Labs and an NSA joint advisory.